One of my posts here gained popularity in the #Flathub vs. traditional #Linux distributions debate and I still stand by my claim that @flathub enforces its rules more strictly than Linux distributions and checks maintainers more thoroughly. None of my #Fedora packages have ever been held for review after being accepted into the repositories. Even though it's a complication for me as a maintainer, I approve it.
yeah. it's just different contribution and maintenance models that prioritize different things. I don't think there's a clear "this is better in all cases" (yet, or ever)
@decathorpe Sure, I don't want to denounce Linux distributions. Their model has proven to work. I just want to break the notion of many people who think the distro repositories are a pristine source of safe and vetted software while everything else isn't.
Well I don’t have personal experience with Fedora, but for Debian, there is the NEW queue where all newly uploaded (binary) packages are held until manually reviewed: ftp-master.debian.org/new.html
True (but also for new binary pkgs of existing source pkgs). OTOH there is an extensive vetting process for actually becoming a Debian Developer with upload rights in the first place to ensure people have the required skills and know about their responsibilities. Then there is the automated migration of the pkgs from unstable to testing after several days of there are no new bugs reported.
@moschlar yeah, Linux distros are very strict at the beginning. It's difficult to become a packager, to get a new package into the distro. But after that it's quite relaxed. I wish there were more automated checks and enforcement. It isn't only about security. It makes me keep doing a good job as a maintainer.
Fabio Valentini
in reply to Jiří Eischmann • • •Jiří Eischmann
in reply to Fabio Valentini • • •moschlar
in reply to Jiří Eischmann • • •Debian NEW and BYHAND Packages
ftp-master.debian.orgJiří Eischmann
in reply to moschlar • • •@moschlar but that's for new packages only, isn't it?
@flathub
moschlar
in reply to Jiří Eischmann • • •moschlar
in reply to moschlar • • •Jiří Eischmann
in reply to moschlar • • •