On Sunday 2019-09-22 09:09, Pablo Neira Ayuso wrote: >> > src/linenoise.c | 1201 +++++++++++++++++++++++++++++++++++++++++++ >> >> That seems like a recipe to end up with stale code. For a distribution, >> it's static linking worsened by another degree. >> >> (https://fedoraproject.org/wiki/Bundled_Libraries?rd=Packaging:Bundled_Libraries) > >I thought this is like mini-gmp.c? Are distributors packaging this as >a library? Yes; No. After an update to a static library, a distro would have to rebuild dependent packages and then distribute that. Doable, but cumbersome. But bundled code evades even that. If there is a problem, all instances of the "static library" would need updating. Doable, but even more cumbersome. Basically the question is: how is NF going to guarantee that linenoise (or mini-gmp for that matter) are always up to date?
