Let it explode
Let it explode
Posted Feb 3, 2025 12:38 UTC (Mon) by amacater (subscriber, #790)In reply to: Let it explode by rhowe
Parent article: Vendoring Go packages by default in Fedora
This also becomes much more difficult when there is a security problem / a severe bug and you need to know *exactly
how many library copies you have / where they all are. That's also the reason for some folk to dislike snaps, Flatpak and similar - it's software bloat to some extent and each flatpak is essentially an unknown black box.
For other languages or on the scale of a large project like Debian, the amount of extra archive space would become problematic. There's also no possibility of deduplication. That's one of the reasons why distributions try to de-vendor ... and that takes us round to a whole other part of this series of threads.
