-15
Wid: My package manager project (github.com)
submitted 2 months ago by to c/rust@programming.dev
37 comments fedilink hide all child comments
 

Wid: My package manager project

Hi guys,

This is my package manager project. Wid, as the name implies is a Windows Downloader. My project is open-source and GPL v3 license. You can figure out the rest by experimenting. You can learn the commands by entering the "wid" command into cmd.

Repo: https://github.com/ZeSystem-Inc/wid Releases: https://github.com/ZeSystem-Inc/wid/releases

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 2 months ago (3 children)

Sure, you might today, but tomorrow? How can anyone trust that you wont start serving malicious links?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] [S] 0 points 2 months ago (2 children)

    It's open source. Anyone can audit it. You can create your own sources.list, but if you distribute it, you must open the code. Also, "wid info <package_name>" shows the exact URL it downloads from. Example: wid info llvm shows the official GitHub release link.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 months ago (1 child)

    Thats how it works in theory, but in practice it comes down to trust more than anything else.

    Its more effort to read and validate your list than it is to just go and download the installer directly. So you need people to trust you.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] [S] 1 point 2 months ago

    You're absolutely right. Trust is the real challenge, and I'm just starting to earn it. That's why I keep everything open and plan to add checksum verification. I know it takes time. I'm in it for the long run.

  • permalink
  • fedilink
  • source
  • parent