4 ms·
But presumably, you only include dependencies that you trust and those dependencies themselves do their trusting more strictly than you. Trust is built on vetti
by pipo234 4mo ago
But presumably, you only include dependencies that you trust and those dependencies themselves do their trusting more strictly than you. Trust is built on vetting, signatures and reputation.
That is, at least what we do, in theory. In practice, we cross fingers and let the LLM pick dependencies, are satisfied if it just works and we either update our deps frequently or infrequently.
- jruohonen 4mo ago> Trust is built on vetting, signatures and reputation. https://news.ycombinator.com/item?id=47017833 https://news.ycombinator.com/item?id=47017833 Well, now with an irony, but sadly, of course.
- no-name-here 4mo agoWould Red Hat be considered a trusted/reputable vendor? :-D