Am 30.01.19 um 11:10 schrieb Hans-Christoph Steiner:
> 
> Great that you are giving that talk!  I think the Java Team's work is
> generally under-appreciated, so getting the word out should help with
> that.  Here's what I would add:
> 
> I think one thing to mention is how the Debian Java Team has to
> consistently fight the Java standard practice of bundling all deps into
> a single JAR.  This means there is no shared security updates, each dev
> has to update every dependency themselves in that model.  That works
> great for large companies with staff devoted to doing that.
> 
> For the majority of Debian use cases, that works poorly.  Debian
> delivers on the promise that people can just "apt install foo" and have
> it work, and receive security updates.  The user does not even need to
> know what language the program is written in, it just works.
> 
> Java developers need to learn the value of these use cases, and help
> Debian by making it easier to package Java projects in the standard
> distro method, with shared dependencies that are indepentently updated.

Thanks for your feedback. Yes, that's a very good point and I will
mention it!

Cheers,

Markus

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to