upstream first

Posted Jun 6, 2023 13:45 UTC (Tue) by joib (subscriber, #8541)
In reply to: upstream first by mikebenden
Parent article: Red Hat dropping support for LibreOffice

> And, in the general case, it's not even that I don't trust them *now*. It's that if we all end up with "stub" distros whose only purpose is to run "vendor" supplied flatpaks, the vendor's incentive to start misbehaving will become irresistible as time passes.

It's not like if a distro decides to trust upstream to provide software X via flathub (or whatever it's called) then that decision is set in stone for all eternity. Distros could very well adopt a "trust but verify" attitude, and if upstream starts to misbehave the distro can strip out the dirty bits and package it themselves (be it in rpm's/deb's, a distro-maintained flathub instance, or whatever, doesn't per se matter for this discussion).