Am 30.01.19 um 11:10 schrieb Hans-Christoph Steiner: > > Great that you are giving that talk! I think the Java Team's work is > generally under-appreciated, so getting the word out should help with > that. Here's what I would add: > > I think one thing to mention is how the Debian Java Team has to > consistently fight the Java standard practice of bundling all deps into > a single JAR. This means there is no shared security updates, each dev > has to update every dependency themselves in that model. That works > great for large companies with staff devoted to doing that. > > For the majority of Debian use cases, that works poorly. Debian > delivers on the promise that people can just "apt install foo" and have > it work, and receive security updates. The user does not even need to > know what language the program is written in, it just works. > > Java developers need to learn the value of these use cases, and help > Debian by making it easier to package Java projects in the standard > distro method, with shared dependencies that are indepentently updated. Thanks for your feedback. Yes, that's a very good point and I will mention it! Cheers, Markus
Attachment:
signature.asc
Description: OpenPGP digital signature