Conversation

Notices

1. space monster boyfriend (itspomf@chitter.xyz)'s status on Thursday, 23-Feb-2023 03:57:12 JST space monster boyfriend

   So can someone explain why on earth everyone is moving to binary blobs for linux via flatpak/snap which just sounds like the hell of npm all over again?

   Particularly when all distros already have built-in package managers which can resolve *and* maintain dependencies with very simply commands?

   Because personally, "sandboxing" is a pretty thin excuse when it comes with significant caveats (and even more dependencies).

   • Adrian Cochrane repeated this.
   • Softwarewolf (faoluin@chitter.xyz)'s status on Thursday, 23-Feb-2023 03:57:22 JST Softwarewolf

     in reply to

     @itspomf I feel the same way. Distros shouldn't need Yet Another Package Manager (or two or thee) when they already have one built-in.

     There are a few arguments I've heard in favor of snap/flatpak/appimages, some better than others, but personally I much prefer having my software updated All In One Place.

     Adrian Cochrane repeated this.
   • space monster boyfriend (itspomf@chitter.xyz)'s status on Thursday, 23-Feb-2023 03:57:48 JST space monster boyfriend

     in reply to

     • Softwarewolf

     @faoluin agreed, and I can't help but suspect that it stems from developers not wanting to maintain their own dependencies, since it's "so much easier" to just ship with what works.

     Problem is, this means being reliant on the maintainer to handle vulnerabilities and updates, and based on my time in the software industry, that means your stuff might as well already be compromised.