STOP DOING VENDORING
libraries were not supposed to be bundled with apps
years of software packaging yet no real world use found for 2000 different copies of log4j on the same computer
wanted to automatically include libraries anyway? we had that already, it was called dependency resolution
“hello i would like to port chromium’s webp buffer overflow fix to discord”
they have played us for absolute fools
F00F/Eris :lowResBlobCat:☯️ /
npub1xe…yf8ud
2023-09-28 19:24:02
Author Public Key
npub1xe3scpgw2aqww48vwl5quhg4qez7x75t7lgjgn8xqvyepugjwedshyf8udPublished at
2023-09-28 19:24:02Event JSON
{
"id": "29345fc51a8fe92003f33dc5cb836caeb693d77f3779f3ea53d48815eefc0abc",
"pubkey": "36630c050e5740e754ec77e80e5d150645e37a8bf7d1244ce6030990f112765b",
"created_at": 1695921842,
"kind": 1,
"tags": [
[
"proxy",
"https://0w0.is/objects/29118dde-54cc-4452-9e9f-f231ea5b1acd",
"activitypub"
]
],
"content": "STOP DOING VENDORING\n\nlibraries were not supposed to be bundled with apps\n\nyears of software packaging yet no real world use found for 2000 different copies of log4j on the same computer\n\nwanted to automatically include libraries anyway? we had that already, it was called dependency resolution\n\n“hello i would like to port chromium’s webp buffer overflow fix to discord”\n\nthey have played us for absolute fools",
"sig": "c57df447fb169400294060af9a1617bfb185005ececee2ff3b5b2ca2022597bc078eeef8894731630f6a7025515fa1ea740e59d1f6e9b3973b9a7d34a46c5d13"
}