40
The challenge of maintaining curl (lwn.net)
submitted 1 year ago by to c/programming@programming.dev
11 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [S] 13 points 1 year ago (3 children)

Yeah, it's once again a case of a central piece of software in a very precarious situation, and businesses that aren't … quite mindful of the fact that they're making demands from someone they're not paying.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 12 points 1 year ago (2 children)

    Exactly. At the same time the same businesses are claiming record profits, and not contributing to that central piece of foss software at all in any way (like the car manifacturers mentioned in the post).

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 6 points 1 year ago (1 child)

    Yep. I wonder if that CRA compliance stuff won't change that. Industries with strict demands on safety should be putting in work and resources to ensure that those demands are actually met, but how the CRA deals with FOSS took a bit of work to not be a complete disaster, and I can't imagine it's easy for FOSS projects to work out the details there.

    As in:

    1. The automotive industry absolutely should be CRA compliant,
    2. it'd be nice for everyone if cURL was known to be CRA compliant,
    3. compliance doesn't appear by magic, someone has to put in work,
    4. companies that should be CRA compliant should help with that work.

    In the case where they don't want to pitch in, well, something cURL-equivalent but known CRA-compliant won't just fall off the back of a wagon, which means the companies that need compliance have a problem.

    Then again, apparently the HPE Nonstop ecosystem has git available on their platform all through the spare-time efforts of all of one dude, which absolutely shows that critical systems are willing to rely on precarious software, so I'm not gonna hold my breath.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •