Post #2870222
2026-05-12 15:05 UTC
@civodul@toot.aquilenet.fr Ooh, exciting!
I wonder if someday it could be possible to evaluate channel code in sandboxes as well, so trusting a channel becomes less of a concern. But I know that gets a lot more complicated than evaluating only the channel file itself in a sandbox
Replies (1)
-
@civodul@toot.aquilenet.fr 2026-05-12 16:14
@jfred@jawns.club It would get a lot more complicated and I’m not sure it’s worth the effort: if you’re going to install packages from a channel, then those packages matter too. Put differently, if you trust the packages provided by a channel, you might just as well trust its package definitions and modules.