Recent searches
Search options
@puppygirlhornypost@transfem.social @dalias I agree with you; I'm going to try to rephrase my initial question 
Given that virtually all¹ package managers have some way to run arbitrary postinstall scripts (as root!); what makes a deb/rpm/AUR/... better than curl|sh?
My stance is that if I install packages from "core" repos, I'm probably good, because these maintainers usually care *a lot* and to a fantastic job (at least compared to the average dev trying to package their stuff).
But with 3rd party stuff…
@jpetazzo @puppygirlhornypost@transfem.social Yes, it's basically the difference between trusting one party you chose to mediate these things and make good decisions for you, and N parties who at best are sloppy, if they don't have outright conflicts of interest that disqualify them from making these decisions for you.