On Fri, May 3, 2019 at 8:26 AM Tomasz Kłoczko <kloczko.tomasz@xxxxxxxxx> wrote: > > On Fri, 3 May 2019 at 12:44, Nicolas Mailhot <nicolas.mailhot@xxxxxxxxx> wrote: > [..] > > > Point taken. Can you shortly describe other use cases? > > > > You use apps in one of those languages that static build by default. > > There is a security alert in one code component. You want to know which > > packages in your repo/mirror have been build using the broken piece of > > source code > > OK. Some time ago I've successfully removed all static libraries on my > all build systems. > Good to know that I will never have such dilemmas :o) > Nope. Between Go and Rust, you have literally thousands of static linked dependencies, so it does matter in that case. -- 真実はいつも一つ！/ Always, there's only one truth! _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
