laykg

4 ms·

1. 1.▲
   by laykg 6y ago

   Well, the modern package managers are really a monorepo with an exponential numbers of versions in production. No wonder it works for developers.
2. 2.▲
   by laykg 6y ago

   The "balkanized" downstream has been working quite well, unlike malicious packages on PyPI. The only major issue was the OpenSSL fiasco that was due to overpatching upstream. Overpatching indeed should stop but is not a flaw of t
3. 3.▲
   by laykg 6y ago

   I think many package managers take longer than a week to figure out. RPM is more difficult that deb, setuptools takes months to understand it fully and is changing constantly. Meson, Conan, winget+msi, and the hundreds of other mixtures