Hello, On Tue 24 Mar 2020 at 05:37AM -05, Michael Lustfield wrote: > The 'go vendor' approach is especially bad within the Debian context because it > will download any/all modules that are referenced. In some cases, 'go get [..]' > can go from downloading a single repository to downloading 200+ because one (1) > extra dependency was added for one (1) extra feature that almost nobody will > ever use. > > It's nearly guaranteed that at least a large handful of those will have no > license at all and at least one is going to have large embedded non-dfsg blobs. > > Or, to summarize my rant... > > These lazy young whipper snappers don't know what good source looks like! > > .. back in my day, we coded on paper, had real bugs, and that's just the way we > liked it. If there are multiple DFSG issues then I would say that this is more than a rant. -- Sean Whitton
Attachment:
signature.asc
Description: PGP signature