Review?
Review?
Posted Apr 23, 2026 1:24 UTC (Thu) by pabs (subscriber, #43278)Parent article: Dependency-cooldown discussions warm up
I feel like code review and building from source is the way to avoid malware in the "supply chain".
Of course code review takes a lot of effort, so distributed social code review is needed. In that arena there is traditional distros (but they do minimal review), or there is cargo vet, but I feel like crev is better, but stagex folks found that crev needs some enhancements to support the full-source bootstrap use-case. So it isn't clear what the right answer is for code review.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.