For an important production system, you probably want the source of any third-party packages on which you depend to be in Git (or another SCM system) that you control.

You might also want to audit those packages yourself, as well as audit any new version changes to them, before you push to production.

After you do those things in SCM, depending how you do it, you *might* find it's more convenient to simply load the third-party code you need using the module system `require` only, without an additional package system.

--
You received this message because you are subscribed to the Google Groups "Racket 
Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to racket-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/racket-users/3abb676b-a9b2-7578-1246-5e58446faa8d%40neilvandyke.org.

Reply via email to