Reindl Harald (h.reindl@xxxxxxxxxxxxx) said: > Am 20.09.2013 17:18, schrieb Miloslav Trmač: > > (IMHO, disk space is cheap enough that just using hard Requires: is > > rarely wrong enough to worry about it.) > > no it is *not* > > in cloud infrastructure where you have 100, 500, 1000 > instances and need to reserve 50 or 150 MB more for the > base OS because dependencie chains you end easily in > a lot of gigabytes and not only the space, also the > time updates on all the instances takes > > additionally there is a security point of view > > take a look which software comonents in the last few > months had security-fixes where i even did not condiser > that they could open a security hole willingly > > with every pulled and distributed dependency you raise > the amount of code with potential unknown security > relevant bugs Sure, it's a good principle, but you also have to tailor it to the situations where it's applied. For example, are people *really* using mc for work inside cloud images? If it's a tool that is confined to administator console usage on their laptop/workstation, you could argue that there are different criteria for what is considered an 'excessive' dependency. Bill -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
