Post #2340696
2026-05-06 13:38 UTC
@arclight@oldbytes.space It sounds like the problem you're addressing is not "publicly distributing code" that might be dangerous, but the catastrophe of LPMs (language package managers) making unvetted code posted by any random author into something that's essentially part of the language's standard library.
Replies (1)
-
@dalias@hachyderm.io 2026-05-06 13:52
@arclight@oldbytes.space Prior to the current LPM regime, library code that wasn't yet vetted and deemed important enough to be included in distros was only really visible to people with adjacent domain expertise to evaluate whether they wanted to use it by copying it into their project or having users obtain it manually out-of-band. This produced a sort of organic process and feedback loop by which it could be established if anyone had the will to be responsible for large-scale use of the code.