Comment on GitHub Actions Has a Package Manager, and It Might Be the Worst
Piatro@programming.dev 2 months ago
R has the same problems as far as I’m aware, though it doesn’t form the core of a lot of modern CI of course!
Comment on GitHub Actions Has a Package Manager, and It Might Be the Worst
Piatro@programming.dev 2 months ago
R has the same problems as far as I’m aware, though it doesn’t form the core of a lot of modern CI of course!
festus@lemmy.ca 2 months ago
R (largely and by default) relies on CRAN, and they are extremely selective about what packages they accept, including testing new package versions against downstream packages before publishing an update, etc. That largely mitigates many of the concerns of some random 10 layer deep dependency getting swapped for something malicious.