logoalt Hacker News

cmeacham98today at 3:36 AM2 repliesview on HN

The difference comes from the fact distro maintainers choose the software they package, while language maintainers largely don't.

For example, how do you prevent somebody from phishing/typosquatting users with a package named similarly to a popular one? For distro maintainers the answer is simple - don't package it. Debian is unlikely to add a "f1refox" package. Language maintainers don't have that luxury.


Replies

brabeltoday at 6:32 AM

Oh what?? Most package managers do try to prevent typo squatting!! Your insistence that there’s something fundamentally different between different package managers is just weird! Debian, as npm, lets you package and distribute software. The differences between them are related to policy preferences but the basic idea is the same!

bitmasher9today at 4:11 AM

I think that’s a difference in implementation details, not a difference in what it fundamentally is.

I’m not arguing that there aren’t differences between the two, I’m arguing that they are fundamentally the same solution (gather all of the software in one location with) to same problem (how can I safely download some software).

show 1 reply