logoalt Hacker News

zahlmanyesterday at 11:28 PM1 replyview on HN

> One key shift is there is no packager anymore. Its just - trust the publisher.

Repositories like NPM's, and PyPI, contain many more packages than any Linux distro. And the Linux Foundation actually gets funded.


Replies

calvinmorrisontoday at 2:12 AM

NPM isn't a package repository it's more akin a code repository.

There's a reason why most distributions dont ship upstream (except basically Arch)