9 ms·
Why not to create a separate list of verified package versions for most popular packages, AKA «stable» channel? Use stable channel for typical packages, use bl
by oneshtein 2mo ago
Why not to create a separate list of verified package versions for most popular packages, AKA «stable» channel?
Use stable channel for typical packages, use bleeding edge channel for some specific packages only.
- philipwhiuk 2mo ago> verified package versions Who is doing this verification?
- oneshtein 2mo agoThose with skin in the game.
- cheschire 2mo agoAnd then who watches the watchmen? Chains of authority can always be questioned. I think GP is suggesting that the package management platforms themselves provide the verification if they want to stay in the business of being the de facto source.