TODOS
- [ ] https://blog.holz.nu/2024/03/29/0.html
- [ ] https://www.danisch.de/blog/2024/04/01/die-xz-attacke/
- [ ] https://research.swtch.com/xz-timeline
- [ ] Remove Spring Boot dependency.
- [ ] Create guidelines for dependencies.
- [ ] The Open Source Software Supply Chain Isn't REAL!!
- https://www.softwaremaxims.com/blog/not-a-supplier
Disclaimer no Linux expert
The attack on xz
That is the cause for this commentary.
Small vs big dependencies
Quality is a Myth
Everybody hates Systemd
Why UNO is so ineffective?
Any Real solution will be likely a badly perceived solution.
M2 repo inside git repositories
Consequences for Network Project
- [ ] Custom adaptable and injectable API ar important. The absent makes dependency problems bigger.
- [ ] There will not be a fix for such attacks for now, but a TODO regarding this in the dependency guidelines is required.
- [ ] Limited backward compatibility