I believe a whole generation of developers miss how open source used to work
Armin Ronacher ⇌@mitsuhikoI really believed a whole generation of developers, who only know open source from npm and pypi, miss how open source actually used to work. When Debian or a Linux distribution ships a dependency they take responsibility of it. If there is a security issue and it’s not fixed by the developer upstream, they fix it for their users.
- ▪Armin Ronacher ⇌@mitsuhikoI really believed a whole generation of developers, who only know open source from npm and pypi, miss how open source actually used to work.
- ▪When Debian or a Linux distribution ships a dependency they take responsibility of it.
- ▪If there is a security issue and it’s not fixed by the developer upstream, they fix it for their users.
Opening excerpt (first ~120 words) tap to expand
Armin Ronacher ⇌@mitsuhikoI really believed a whole generation of developers, who only know open source from npm and pypi, miss how open source actually used to work. When Debian or a Linux distribution ships a dependency they take responsibility of it. If there is a security issue and it’s not fixed by the developer upstream, they fix it for their users. Debian and others basically vendor every thing they distribute. They honor the license and they maintain patches. Most of the stuff that you get from your Linux distribution is basically a (small) fork. The same is true for Apple, Microsoft and others. The open source software they ship, they carry that responsibility.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at X (formerly Twitter).