logoalt Hacker News

const_castlast Monday at 3:47 PM1 replyview on HN

Debian IS more cautious with dependencies, in that you won't get hidden dependencies that aren't in the repos.

I don't want to install an app that downloads and executes 500 node packages that I don't know what they do. Those packages should already be vetted and in Debian. If not, then I'm not interested.

Side stepping the distro repos for dependencies for software in the repos leads to unexpected behavior.


Replies

StopDisinfo910last Tuesday at 10:13 AM

> Debian IS more cautious with dependencies, in that you won't get hidden dependencies that aren't in the repos.

For a definition of cautious I don't personally share.

Debian doesn't vet packages. Debian maintainers are less competent than the "upstream" they question approximately all the time, which is why they keep breaking stuff in more or less severe way (OpenSLL anyone?). And let's not even talk about the insane stuff like when maitainers decide to support a fork they like instead of the piece of software users actually want (Libav anyone?).

> If not, then I'm not interested.

And that's your choice. That doesn't mean developers should care, nor that it is actually a good idea.

show 1 reply