4 ms·
The 'real' problem is that you shouldn't have to install dependencies in OS-level locations for an application-level product. In other words, the app should be
by teacup50 11y ago
The 'real' problem is that you shouldn't have to install dependencies in OS-level locations for an application-level product.
In other words, the app should be able to bundle dependencies without having to use a crazy opaque container system, and those dependencies should be easily auditable.
This is the case for Java, where dependencies are 1) bundled with the application, 2) declared explicitly, 3) signed, 4) centrally managed with maven repository software.
- pyre 11y agoIn Python, you get similar things with the exception of "bundled with the application" and IIRC "signed" only happens when uploading to the Python Package Index.