@movq@www.uninformativ.de I think overall there are two issues at play here we can agree on, whether or not it’s “managed” by a distro (I think that’s kind of irrelevant here, I use/develop on macOS for example and use brew but I don’t want my deps to come from Homebrew uggh yuck) – Anyway There are two issues I see:

• Supply Chain – Being able to vet, validate and verify everything that goes into a piece of software or product/service
  
• Library hygiene – Being prudent about libraries as a Library author and reducing or eliminating “transitive” dependencies.

@movq@www.uninformativ.de It’s okay I was there once upon a time too. There was a previous James that uses to be all MS-DOS, then WIn 3.x, then Windows whatever, and then LInux on the Desktop for many years and finally macOS (which really is the only decent OS for the vision impaired)