Fixated on end-user security, FOSS developers neglect their own...

• bad_actor_poc

  12 322 0.0 Rust

It turns out that because Rust can execute code at compile time, simply opening a Rust source file in an editor with code completion support can cause a virus to be installed on my computer. Apparently I can't trust anything but basic text editors anymore...

• security

  2 4 0.0

  Embargoed security issues that will be made public after a fix is made available. Use https://github.com/nim-lang/security/security (by nim-lang)

  

I can't trust language package managers either, especially non-mainstream ones... Nim package manager used to not validate secure connections by default until very recently. Lazarus doesn't even use a secure protocol (uses http://, not https://). Chicken Scheme doesn't either. It's time for a new mantra "don't roll your own software downloaders" to complement "don't roll your own crypto"...

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• lazarus

  1 355 9.9 Pascal

  Discontinued Lazarus - an IDE and GUI toolkit for use with Free Pascal. This is an unofficial mirror of the Lazarus SubVersion repository and is for convenience use only. It is synced every 15 minutes. For submitting patches or bug reports, go to http://bugs.freepascal.org (by graemeg)

I can't trust language package managers either, especially non-mainstream ones... Nim package manager used to not validate secure connections by default until very recently. Lazarus doesn't even use a secure protocol (uses http://, not https://). Chicken Scheme doesn't either. It's time for a new mantra "don't roll your own software downloaders" to complement "don't roll your own crypto"...

• Elm

  198 7,447 5.4 Haskell

  Compiler for Elm, a functional language for reliable webapps.

  

Elm is very good with this. All third party packages are forbidden from having impure functions, so they can't hide any side effects outside of things like Task return vales.

Suggest a related project