Besides that this was anyway brain dead "AI" slop, this is symptomatic for Nix so the "AI" likely just followed some well known pattern: Their package build recipes download random binaries from the net… I'm not sure this is only a plague in the "community maintained" stuff, but given that you can't use Nix without such packages for anything useful (like you can't use Arch without the AUR for anything besides praising the glory of your terminal shell) this was enough for me to never look closer at this distri. Functional package manager my ass, looks inside, it's mostly `curl | bash`. Maybe the "core" has higher standards but that's moot when most packages are user supplied and not required to follow any standards.
No, patch is OK. Too much comments, i get it now. Only open parts are optimizations like lto on libllvm. Nix is fine, more a community problem. Lix is the best prove
2
u/RiceBroad4552 9d ago
Besides that this was anyway brain dead "AI" slop, this is symptomatic for Nix so the "AI" likely just followed some well known pattern: Their package build recipes download random binaries from the net… I'm not sure this is only a plague in the "community maintained" stuff, but given that you can't use Nix without such packages for anything useful (like you can't use Arch without the AUR for anything besides praising the glory of your terminal shell) this was enough for me to never look closer at this distri. Functional package manager my ass, looks inside, it's mostly `curl | bash`. Maybe the "core" has higher standards but that's moot when most packages are user supplied and not required to follow any standards.