Comments (2)
TL;DR: We might be able to use
cargo vendor
to collect Rust project dependencies and turn them into resource blocks a la Python and other language ecosystems. This will both improve our reproduciblity and our ability to enforce hermetic build systems (i.e. prevent the build phase from touching the network at all).
I actually think we should do the opposite: avoid doing what we're doing with Python whenever we have something with an actual Gemfile.lock
equivalent in the repository and/or tarball we can use instead.
I think "ensure that these specific versions are used" is an upstream responsibility that e.g. Ruby and NodeJS ecosystems have figured out and we should do what we can to push this responsibility out of Homebrew.
from brew.
Hmm, that's a good point -- this is nowhere near as bad in Ruby or Rust as it is in Python. I probably won't get to this in the near-term in any case, so closing 🙂
from brew.
Related Issues (20)
- Homebrew's brew alias is broken after update this morning on Debian machines HOT 2
- Are all of the `undef`s we use really necessary? HOT 27
- HOMEBREW_PIP_INDEX_URL is misleading and does not work-as-intended with some mirrors
- “Error: comparison of PkgVersion with String failed” when running `brew upgrade` HOT 3
- brew upgrade or install fails with comparison of PkgVersion with String HOT 1
- Brew link step fail if installing multiple formulae with common symlink using a system with symlinked /home HOT 6
- golang not update to 1.23.0 HOT 2
- Happened ruby runtime error on macOS Sequoia HOT 2
- Homebrew no longer correctly reads `HOMEBREW_DOCKER_REGISTRY_BASIC_AUTH_TOKEN` from /etc/homebrew/brew.env
- environment file variables are not honored
- `brew install` call `gh attestation verify` Disrespect `XDG_CACHE_HOME` HOT 3
- Fix failing tests and write other tests as well HOT 1
- Suggest to change the way to read file in export_homebrew_env_file HOT 4
- Add a more customizable ENV file loading process HOT 2
- Download does not start immediately, a lot of network traffic (file is downloaded twice?) HOT 5
- macos sequoia 15.1 : We do not provide support for this pre-release version. HOT 4
- `brew upgrade -s` does not build from source or error out HOT 7
- [Intentional or bug?] v4.3.19 `brew list` now outputs single column lists HOT 3
- MariaDB fails to start on Debian 12 HOT 3
- Document cryptographic signature usage for authenticity HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from brew.