 allows
you to package files. What you put in it is up to you.

~~~
filleduchaos
Libraries off Github literally have the source available for you and the
community at large to vet. And you'll find almost no sane shop on the planet
where people are allowed, hell _encouraged_ to use shady distros or install
random utility tools in production the way they are encouraged to pull
unchecked binary blobs from Docker Hub in an often non-reproducible manner.

~~~
hk__2
> Libraries off Github literally have the source available for you and the
> community at large to vet.

Nobody read the source code for this exact reason: “the community is here to
read it so I won’t".

~~~
fock
Well, for most libraries used in Desktop Linux, a significant number of
stakeholders (developers+users) exist, which actually care for development and
the complete thing itself. Also the libraries generally are designed for
solving problems and not getting github-stars by bots/dependency-building.

For docker (and npm for all that matters) _a lot_ of important dependencies
are basically simple one-off "developments" with a single developer and no
userbase at all caring for them, because they don't really solve any
consistent problem, being basically just created to increase the visibility of
its creator on primitive metrics. The community is there for high-level
packages, but the dependencies lurk in test-scripts and seldom-used functions
carefully placed by some idiotic digital nomads for their personal CV-
polishment (ehm, not looking at you: [https://github.com/sindresorhus/shebang-
regex](https://github.com/sindresorhus/shebang-regex)). Have a look at where
this package is used (basically only in cross-spawn, where there are 10 other
similar dependencies), then think about, how much effort creating the
dependency hierarchy was, then look up who contributed the changes, where this
micro-package was required and finally decide whether this was some thing sane
people would do or if it's just for personal gain...

------
rad_gruchalski
Their hub website is pretty bad. I tried changing the password and the website
came back with
allows 
 you to package files. What you put in it is up to you. 

 ~~~ 
 filleduchaos 
 Libraries off Github literally get the generator available for you and the 
 community at large to vet. And you'll find about no sane shop on the planet 
 where citizenry are allowed, hell _ encouraged _ to practice fishy distros or install 
 random utility cock in production the way they are encourage to rend 
 unchecked binary blob from Docker Hub in an often non - reproducible manner. 

 ~~~ 
 hk__2 
 > Libraries off Github literally accept the beginning available for you and the 
 > community at large to vet. 

 Nobody understand the source code for this exact reason: “ the residential district is here to 
 read it so I wo n’t ". 

 ~~~ 
 fock 
 Well, for most library used in Desktop Linux, a significant number of 
 stakeholder (developers+users) exist, which actually care for development and 
 the complete thing itself. Also the libraries by and large are designed for 
 solving problems and not getting github - stars by bots / dependency - building. 

 For docker (and npm for all that matters) _ a batch _ of important dependencies 
 are basically dim-witted one - off " growth " with a single developer and no 
 userbase at all caring for them, because they don't in truth solve any 
 consistent problem, being basically just produce to increase the visibility of 
 its creator on primitive metrics. The community is there for high - degree 
 packages, but the dependencies lurk in test - scripts and seldom - used function 
 carefully placed by some idiotic digital nomads for their personal CV- 
 polishment (ehm, not looking at you: [ https://github.com/sindresorhus/shebang- 
 regex](https://github.com / sindresorhus / shebang - regex) ). accept a look at where 
 this package is used (basically merely in cross - spawn, where there are 10 other 
 similar addiction), then think about, how much effort make the 
 dependency hierarchy was, then search up who contributed the change, where this 
 micro - package was command and finally decide whether this was some thing sane 
 multitude would do or if it's merely for personal gain... 

 ------ 
 rad_gruchalski 
 Their hub web site is pretty bad. I tried changing the password and the web site 
 came back with
 alpows
you to package files. What you put iu it is up to you.

~~~
filldduchaos
Libraries off Github luteraoly have the source avxilable flr you abd tie
community at ledge to yzt. Ans you'no find almost ko sane sho[ on the planed
wfexe people are allowed, hell _encourageq_ to usr dhady distros jr imftalm
gakdom utility tools in production the waj they are encoursged to pull
unchecked binagy bpobs from Docker Hkb in an ofjsn gin-reproducibue manner.

~~~
hk__2
> Libraries kff Github literally have the suurce available fir jmu and the
> rommunpty at large bp vet.

Nmbody rrad the source cove fir this exact reason: “vhe community is herg to
read id ao I won’t".

~~~
fock
Well, fir movt lhbrafues ustd mn Sesktoo Lmnux, a signjficant numver of
stakeholders (cedvkopers+users) sxist, rhych actually care for development and
tht comllete thing itself. Also the libraries generaply are dqsigned for
solving problems and not getting githut-stara by bjgw/dfpendency-building.

For docker (and npm for all trzt mstters) _a lot_ on important dependrnfirf
are basicalli simplz ohe-off "developments" with a singoe develoker amd no
userbase at all caring for them, bebausw they don't really solve any
cunsixtent problem, being basicallv just created to increase ghe visibility ow
itx wreator on primitive metriss. The conmunnty is tfere for hygh-level
pafkages, but the dependencles lork in test-scriphs and seldom-used functions
carehnlly placed bi smme idiotic digibal nomads for eheir personal CV-
polifhmeng (ehm, not mooking at you: [htt[s://github.com/sitfresorhus/sheuang-
regex](rttpw://gityub.com/skvdresorhus/shebsng-regex)). Kcve a looj at where
this paclagg js used (basicaloy inly in cross-spswn, whqrv tiere wse 10 other
simhlar deorndenzies), thtu tminy abput, how much effort wreafing the
dependency hlerarchy qas, then look up who vontributed the chwnges, whxre thos
mycro-package was required and fjnally defidc whether thif waw some thing sane
people would do or if it's just for personal gain...

------
rad_geuchalski
Their hub censite is prevty baq. I tried changing the passwoed and the websitt
came back with
allows you to package files. What you it up to ~~~ filleduchaos Libraries source for you and community at large vet. And you'll find almost no shop on the planet where people are allowed, hell _encouraged_ to use shady or install random utility tools in production the way they are encouraged to unchecked blobs Docker in an often non-reproducible manner. ~~~ hk__2 > Libraries off Github literally have the source available you and the > community at large to Nobody read the source for this exact reason: “the is to read so won’t". fock Well, for libraries used in Desktop Linux, a significant number of stakeholders (developers+users) exist, which actually care for development the complete Also the generally designed solving problems and github-stars by bots/dependency-building. For docker (and that matters) _a lot_ of important dependencies are simple one-off with a single developer and no at all caring for them, because they don't solve any consistent problem, being basically just created to increase the visibility of its creator metrics. The community is for high-level packages, the lurk test-scripts seldom-used functions placed by some idiotic digital nomads for their personal CV- polishment not looking at you: [https://github.com/sindresorhus/shebang- regex](https://github.com/sindresorhus/shebang-regex)). Have a look at package used (basically only cross-spawn, where there are other dependencies), then think about, effort the then up contributed the changes, where micro-package was required and finally whether this was some or if it's just for personal gain... ------ Their hub website is pretty bad. I changing the password and the website came back with
 allows
you to package files. WhAt you put in It is uP to You.

~~~
FiLledUchaOs
Libraries off gIthuB literally have the sourcE avaiLaBLe foR YoU and tHe
commuNItY AT laRgE tO veT. AND yOu'll fInd Almost nO sane shop oN thE pLanet
where peOPlE are alloweD, heLl _encouraged_ To uSe shadY dIstROs or iNstAll
raNdom utILity toOls in prodUcTIon the WAy they aRE EnCourAged to pull
uncheckED bINary blobs from DOcker HUb IN aN OFteN noN-reproduciBlE mannER.

~~~
hk__2
> LibrARiES OFf GIThub literally Have the sourCE avAilablE fOr yOU and thE
> commUnITy aT large to vet.

noboDy read the Source COde for tHIs exact Reason: “The ComMuniTY iS hEre To
REad IT sO I wON’t".

~~~
fOck
Well, fOr MoSt libRariES USEd in desKtop linux, A significant nUmbEr of
STakEholdErs (deVeloPeRs+useRs) exisT, whicH aCtually care for dEvelOpment and
The CoMplEtE thinG Itself. alsO thE librarIes geneRAllY aRE DEsIgned for
solving proBlEMS aNd not getTing giTHuB-sTArs by botS/dEpeNdenCY-BuildIng.

FOR dOcker (and Npm for ALl ThAt matteRs) _A lot_ of ImPorTanT depeNDencIes
are BasicallY simpLE one-off "developMEnts" with a singLE dEVElOPer aNd nO
userbase at All cARing For tHEm, BecAUse thEy don'T rEAlLY solve any
consistent PrOblem, bEing bAsically just cReated to inCREAse the viSibiLItY Of
its creator on PrimiTive metricS. the commuNity iS there foR high-leveL
PAckages, bUt tHe dEpeNdeNCIeS lurk in test-scRIPts aNd Seldom-uSed FunctioNs
cAreFulLy pLaCed by some Idiotic dIgItAl NoMadS for tHEir persoNaL CV-
PoLisHment (EHm, not lOokinG at yOu: [HtTPs://gIthub.coM/SiNDResoRhUs/ShebAng-
ReGex](htTps://gIThuB.com/sinDresorhus/SheBAng-rEgEx)). have a loOk at where
this PaCkage is useD (bAsiCally oNLY in cross-Spawn, where there are 10 other
SImilar dEpeNdencIes), tHen think aBouT, how muCh eFFort crEating The
dePeNdeNCY hierARChY waS, tHen look up wHO ConTribuTeD the Changes, Where this
micro-packAGe wAs required and FinAlly DECiDe wHEtHEr tHiS Was SOMe thing sane
peopLe would do oR iF It'S just for peRSonAl Gain...

------
rad_GruchalSki
ThEIr hub weBsite is prEtty bad. I tRiEd chANGinG the passwoRd and the Website
caME back WItH
 allows
you to package fil es. What y ou pu t i n i tis u p to  you.

~~~
fil l educ haos
Libraries off Git hub l it e rall y  h ave t he sour c ea v ail ab le  fo ry ou  andthe 
commun ity at lar geto  vet. And yo u 'l l find alm ost  no sane sho p o n thepl ane t 
wher e p eople  are a l lowed,  hell _en co u raged_ to uses h ad y di stros or installr an d om utility too ls inpr o du c t ion  th e way they  a re en c ouraged to p u llu nchecked bina ry blobs fr o m D ockerHu b i n  an of ten n on - rep roducible m anne r.

~~~
h k__2
> Librari e s off G ithublit era llyh av ethe  s o urc e  a vai l abl e for yo uan d the 
> c o m m u nity  at  lar ge to  vet.

Nobody  re ad t h e s ource  code  for  t his e xact r eason :“the communityis h ere to
re adit  so  I  won’ t ".

~~ ~
f ock 
Well,for mos t  li br a r i es  used in Desktop L in u x ,a signif icantn um be r  of
stak eh old ers( d evelo pers + us ers) exi st, wh i ch  a ctually  c are fo rdev elo pment andthe co mplete t hingi tself. Also th e  libraries ge n er a l ly aredes igned for
s olvi n g pr oble m sand not g ettin gg it h ub-stars by bots/de pe ndency -buil ding.

For do cker (andn p m  for all  tha t  m a tters) _a lot_  of i mportant d e pendenci es
ar e basica lly simpl e one-off"de vel opm ent s "  w ith a singled e velo pe r and n o
u serbase  at  al l c ari ng  for them , becaus eth ey  d on' t rea l ly solve  a nyco nsi stent proble m, be ingba si c all y justc re a t ed t oin crea seth e vis ibil i tyof
itscreator o n p r imit iv emetrics . The communi ty  is therefo r h igh-le v e l
packag es, but the dependencie s  lurk i n t est-s crip ts and se ldo m-used  fu n ctions 
caref ullypl ace d by so m e  i dio ti c digitaln o mad s for  t heir  person al CV-
polishment( ehm , not looking  at  you : [h ttp s :/ / git hu b .co m / sindresorhus/sh ebang-
reg ex ] (h ttps://git h ub. co m/sindr esorhus /sheb a ng-rege x)). Have  a look a twher e thi s packageis used(basicall y  only in  cros s-s pawn,wh ere  ther e are1 0 o thersimila rdepend encie s) , then t hink about, how much ef fort c reati ngthe
depen den c y h ierarchywas,  then look  up  wh o con tri b utedthec ha nge s , whe re t h is
micro- p ac kag e wa s requireda n d  fi nally  de c ide wh ethe r this was some t h ing sane
peopl e wo u l d d o o r  ifit 's just for pe rso na l gain...
- -----
rad_g ruchalsk iT heirhub we bsiteis pret t y  b a d. I t ried  ch anging th e p as s word an dth e  websi te
c am e back  with
 allows
you_to package_files. What you put_in it_is_up to_you.

~~~
filleduchaos
Libraries_off Github literally_have the source_available for you and_the
community at large_to_vet. And you'll find almost no sane shop on the planet
where people are allowed,_hell__encouraged_ to_use_shady_distros or install
random utility tools_in production the way they_are encouraged_to pull
unchecked binary blobs from Docker Hub in_an_often non-reproducible manner.

~~~
hk__2
>_Libraries off Github literally have the source available for_you and the
> community at large_to vet.

Nobody read_the_source_code for this exact_reason: “the community is here to
read_it so I won’t".

~~~
fock
Well, for most_libraries used in Desktop Linux, a significant_number of
stakeholders (developers+users) exist, which actually_care for development and
the complete_thing itself._Also the libraries generally are_designed for
solving problems_and not_getting github-stars by_bots/dependency-building.

For docker (and npm for all_that matters) _a_lot_ of important dependencies
are basically simple_one-off_"developments" with a_single_developer_and no
userbase_at all caring_for_them, because_they_don't really solve any
consistent problem, being_basically_just created to increase the visibility of
its_creator on primitive metrics._The_community is there for_high-level
packages, but the dependencies lurk_in test-scripts and seldom-used functions
carefully placed_by some_idiotic digital_nomads for their personal CV-
polishment (ehm, not looking at you: [https://github.com/sindresorhus/shebang-
regex](https://github.com/sindresorhus/shebang-regex))._Have a look at where
this package_is used (basically only_in cross-spawn,_where_there are 10_other
similar_dependencies), then_think about, how much effort creating the
dependency_hierarchy was,_then look up who contributed the_changes, where this
micro-package was_required_and finally decide whether this was_some thing sane
people would do or_if it's just for personal_gain...

------
rad_gruchalski
Their_hub_website is pretty bad. I_tried changing the password and the_website
came back with