With all the supply chain attacks in the Linux ecosystem, isn’t the natural solution to move to full application sandboxing?

Flatpacking is great but not all applications support it.

Is it too much of a hassle?

you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago

Yeah, that doesn't always work well. And let me be clear - the AUR isn't the only place NPM is creeping in as an unneeded dependency.

  • source
  • parent