On Monday, 21 March 2022 at 10:29:53 UTC, Alexandru Ermicioi
wrote:
On Friday, 18 March 2022 at 21:04:03 UTC, H. S. Teoh wrote:
On Fri, Mar 18, 2022 at 11:16:51AM -0700, Ali Çehreli via
Digitalmars-d-learn wrote:
tldr; I am talking on a soap box with a big question mind
hovering over on my head: Why can't I accept pulling in
dependencies automatically?
Because it's a bad idea for your code to depend on some
external resource owned by some anonymous personality
somewhere out there on the 'Net that isn't under your control.
True, and because of that you can try and have local/company
wide dub registry (if not, should be added support for), in
which packages are verified by you/your company, eliminating
the problem of net not being under control.
Best regards,
Alexandru.
That's actually possible right now, in the easiest case you can
have a directory of package zip files.
Isn't that best practice in all language eco systems.
