Some good points here, but… There’s no downside to bundling code?
I know the OpenBSD project has struggled at times with the issue were half a dozen ports all include their own custom version of boehmgc, each of which requires patching to work on OpenBSD. It can’t just be patched once.
Some people do fix security bugs, but others don’t. It took forever for that strtod floating point parsing bug to finally disappear (if it even has).
This drove me nuts building node, which bundles its own OpenSSL library. OpenSSL on my system has quite a few custom mods. It would be my preference to keep them.
And despite claims to the contrary, I do think build time matters. It takes hours to build chromium, and there’s no way to shortcut that pre installing package versions of the dozens of libraries it bundles. This makes me not want to even start.
Some good points here, but… There’s no downside to bundling code?
I know the OpenBSD project has struggled at times with the issue were half a dozen ports all include their own custom version of boehmgc, each of which requires patching to work on OpenBSD. It can’t just be patched once.
Some people do fix security bugs, but others don’t. It took forever for that strtod floating point parsing bug to finally disappear (if it even has).
This drove me nuts building node, which bundles its own OpenSSL library. OpenSSL on my system has quite a few custom mods. It would be my preference to keep them.
And despite claims to the contrary, I do think build time matters. It takes hours to build chromium, and there’s no way to shortcut that pre installing package versions of the dozens of libraries it bundles. This makes me not want to even start.