On Fri, May 3, 2019 at 8:26 AM Tomasz Kłoczko <kloczko.tomasz(a)gmail.com> wrote:
On Fri, 3 May 2019 at 12:44, Nicolas Mailhot <nicolas.mailhot(a)gmail.com> wrote:
[..]
> > Point taken. Can you shortly describe other use cases?
>
> You use apps in one of those languages that static build by default.
> There is a security alert in one code component. You want to know which
> packages in your repo/mirror have been build using the broken piece of
> source code
OK. Some time ago I've successfully removed all static libraries on my
all build systems.
Good to know that I will never have such dilemmas :o)
Nope. Between Go and Rust, you have literally thousands of static
linked dependencies, so it does matter in that case.
--
真実はいつも一つ!/ Always, there's only one truth!