Paco is a free tiny package manager that provides a safer way to manage dependencies by downloading and installing packages from a trusted and predefined array rather than shipping addons and / or binaries directly with the project.

It’s pretty much like Python, Go, or Ruby, where project dependencies can be installed from a list of packages and versions.

We’d love to get any feedback on this and know what you’d like to see improved

Thanks! 👋

  • pikl@lemmy.world
    link
    fedilink
    arrow-up
    7
    arrow-down
    5
    ·
    14 days ago

    So you’re selling it as a secure option, but the only question anyone has asked about security you say I don’t know, laugh and change the subject. Immediately moving on.

    • RelativityRanger@jlai.lu
      link
      fedilink
      arrow-up
      3
      ·
      14 days ago

      you say I don’t know, laugh and change the subject. Immediately moving on.

      Where? I read a suggestion that one could hack the official registry and that’s exactly one of the point that @[email protected] raised afterwards

      Then OP just says lock files and checksums are planned, can’t you read?

    • sunbytes@programming.devOP
      link
      fedilink
      arrow-up
      3
      arrow-down
      1
      ·
      edit-2
      14 days ago

      Selling? It’s free software mate lol
      No addon depends on each other yet, we’re fine we got plenty of time to fix a week old projet
      If you want to stand out, you can do so here and just so you know, commits are coming 😘

      • RelativityRanger@jlai.lu
        link
        fedilink
        arrow-up
        2
        ·
        14 days ago

        Don’t let yourself be put off by negative comments people might make, keep up the good work on this, it’s a great start