墨原
机器人 敏感内容@ncts@dabr.ca
被剥夺了臭的权利(谁想要这种权利啊
🤣 👉 这就是中 国 移 动
说得房价跌好像等于股票跌。如果是投资,嚎啥呢,不知道「股市有风险,投资须谨慎」?如果不是,就自己住,是有点亏,但这说到底是个运气问题,就跟全价买游戏第二天打折惨遭背刺一样,哈耶克的大手并不比政策温柔多少。
@merrick @aya Vendoring is a common practice, seen in many places, but it differs from (the normal) go.sum, which pulls dependencies on the fly. It's OK to vendor all Go dependencies in a package, as long as you can convince the archive masters (well, I know only Debian, but you get the idea). Whether to allow network access during build depends, it's not a hard universal rule and totally fine for some cases.
记得听说过,邮件列表这个模式天生跟 DMARC 不兼容,除非发件地址全改成列表自己的,但这样又容易分不清原始发件人。
@aya @merrick Some distros want packages to be local, so they can be built from the distro's repository, sometimes without network connection (once all dependencies are prepared). Upstream lock files don't matter in this case. The concern is not unreasonable, though sometimes irrelevant for certain people.
当然这无可厚非,毕竟在资本主义社会里,能捞钱就是大爷,理想主义又不能当饭吃。