Rule (sh.itjust.works)
submitted 2 months ago by to c/linuxmemes@lemmy.world
 
you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 months ago (4 children)

Flatpaks and snaps are two examples of deliverables with terribad integration and low SLSA scores. They should be considered toxic.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 11 points 2 months ago* (last edited 2 months ago)

    Snaps I agree just because there is no open source snap store and it’s impossible to set up a 3rd party store.

    Flatpaks though? They let people install packages with weird / rare / not available requirements on any distro. All open source with a really nice sandbox. I think flatpaks are great.

  • source
  • parent
  • [–] 5 points 2 months ago (1 child)

    Let's look at the alternatives:

    • System packages: not viable for the majority of packages because the distro devs don't have time to manually package everything
    • AppImage: even worse integration (like no desktop shortcuts on install). Developer has to guess what libraries need to be included and which ones are already installed by the user. No sandboxing. Probably worse SLSA scores.
    • AUR: even worse security. No sandboxing. Packages are often compromised by hackers.
  • source
  • parent
  • hideshow 1 child comment