Our Software Dependency Problem. https://research.swtch.com/deps (Download and run code from strangers on the internet. What could go wrong?)
I'd love to see more tooling to enable "web of trust" dependency evaluation, e.g. "Russ and Rob both endorsed this package, and I trust them, so it's probably high-quality." One recent example:https://github.com/dpc/crev
-
-
Not a good solution. I can trust a package for a particular task (see
@_rsc example about PCRE in Code Search), but not for universal use.Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
The Perl community long ago (2003) found a need for ratings and reviews of Perl distros: https://cpanratings.perl.org/ Also reviews before publishing modules on CPAN: http://prepan.org/ And automated linting of the whole ecosystem: https://cpants.cpanauthors.org/
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.