Post #2870209
2026-05-12 16:19 UTC
@khinsen@scholar.social @zimoun@social.sciences.re Oh but the question is whether manifest files should be isolated as well—I should read more carefully. :-)
I’d lean towards “no”, because like you wrote, manifests can be and often are more advanced than just lists of package names.
Conversely, channel files are almost always trivial, with ‘channel-with-substitutes-available’ being perhaps the only attempt to program channel files (but it is little used AFAIK).
Replies (1)
-
@khinsen@scholar.social 2026-05-12 18:38
@civodul@toot.aquilenet.fr I am one of those who use 'channel-with-substitutes-available'! For manifests, I would impose restrictions only when loaded from a URL That doesn't make anything worse than now for anyone. @zimoun@social.sciences.re