[–] 3 points 3 years ago (2 children)

One big reason Nim never really caught on is because we've got lots of fast-ish languages with garbage collection (like Go, which sucks a lot of oxygen away from Nim IMO). Rust introduced a new concept to the mainstream that lets you program safely without a runtime hit for garbage collection.

  • source
  • [–] 0 points 3 years ago (1 child)

    I'll be honest, I have no idea. Sometimes, I get nagged that a package is insecure, and it seems reasonable like an old version of Electron, and then I just sigh and add it to my list of packages to ignore that warning on.

  • source
  • parent
  • context
  • [–] 0 points 3 years ago (3 children)

    Trust is a broad term. If you're paranoid, find the package you care about here, and read every line:

    https://github.com/NixOS/nixpkgs

    If you're slightly less paranoid, check the git blame logs for anyone that's touched a package you care about. If you trust all of them, then you're good.

    If you're less paranoid than that, assume that someone reasonable is in charge of that repo. You'll get warnings about insecure packages. I've had to Ok a few insecure packages in my configuration.nix, because I assume the packagers are reasonable people. I may yet find out I've made a mistake.

    Broadly speaking, I think it's the same model as any other distro. Debian for example has volunteers that package stuff. You can go through the same process above and decide how paranoid you want to be for that as well.

  • source