On Friday, 18 March 2022 at 21:04:03 UTC, H. S. Teoh wrote:
On Fri, Mar 18, 2022 at 11:16:51AM -0700, Ali Çehreli via
Digitalmars-d-learn wrote:
tldr; I am talking on a soap box with a big question mind
hovering over on my head: Why can't I accept pulling in
dependencies automatically?
Because it's a bad idea for your code to depend on some
external resource owned by some anonymous personality somewhere
out there on the 'Net that isn't under your control.
True, and because of that you can try and have local/company wide
dub registry (if not, should be added support for), in which
packages are verified by you/your company, eliminating the
problem of net not being under control.
Best regards,
Alexandru.
