[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: What to do when DD considers policy to be optional? [kubernetes]


On Tue 24 Mar 2020 at 05:37AM -05, Michael Lustfield wrote:

> The 'go vendor' approach is especially bad within the Debian context because it
> will download any/all modules that are referenced. In some cases, 'go get [..]'
> can go from downloading a single repository to downloading 200+ because one (1)
> extra dependency was added for one (1) extra feature that almost nobody will
> ever use.
> It's nearly guaranteed that at least a large handful of those will have no
> license at all and at least one is going to have large embedded non-dfsg blobs.
> Or, to summarize my rant...
> These lazy young whipper snappers don't know what good source looks like!
> .. back in my day, we coded on paper, had real bugs, and that's just the way we
> liked it.

If there are multiple DFSG issues then I would say that this is more
than a rant.

Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply to: