On Sat, 2026-04-25 at 09:17 +0200, Óscar García Amor wrote:
> Pip, when run as root, can cause far more damage than simply
> installing packages from the AUR.

I completely agree with that, but on the other hand, if you install
dependencies on top of dependencies on top of dependencies... using an
AUR helper as root, that can have just as bad consequences as installing
something via pip and friends.

To stick with pip: No one is forcing you to use Python. However, once
you’ve chosen a Linux distribution, you’re dependent on that
distribution’s package management system and security team.

There’s a difference, I’m not claiming that pip and its friends are
harmless, but that’s not the topic of this thread.

Reply via email to