• corsicanguppy@lemmy.ca
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    4
    ·
    18 hours ago

    Flatpaks and snaps are two examples of deliverables with terribad integration and low SLSA scores. They should be considered toxic.

    • mholiv@lemmy.world
      link
      fedilink
      arrow-up
      8
      ·
      edit-2
      2 hours ago

      Snaps I agree just because there is no open source snap store and it’s impossible to set up a 3rd party store.

      Flatpaks though? They let people install packages with weird / rare / not available requirements on any distro. All open source with a really nice sandbox. I think flatpaks are great.

    • hirihit640@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      5
      ·
      15 hours ago

      Let’s look at the alternatives:

      • System packages: not viable for the majority of packages because the distro devs don’t have time to manually package everything
      • AppImage: even worse integration (like no desktop shortcuts on install). Developer has to guess what libraries need to be included and which ones are already installed by the user. No sandboxing. Probably worse SLSA scores.
      • AUR: even worse security. No sandboxing. Packages are often compromised by hackers.