this post was submitted on 07 Sep 2024
15 points (74.2% liked)

Open Source

31008 readers
485 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS
 

Today I had to downgrade fastapi from 0.114.0 to 0.112.4 to make a software work. And it just hit me - what if pip didn't support 0.112.4 anymore? We would lose a good piece of software just because of that.

Of course, we can "freeze" the packages into an executable that will run for as long as the OS supports it. Which is a lot longer. But the executable is closed source. We can't see the code that is run from an executable.

Therefore, there is a need for an alternative to which we still have access to the packages even after the program is built. That would make it safely unnecessary for pip to store all versions of all packages forever more.

Any ideas?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] -3 points 1 month ago (4 children)

@obbeel What? You didn't explain how. Your "why" is a little scatter-brained, dude.

[–] [email protected] 1 points 1 month ago (3 children)

What do you mean?

I just find that if pip did not support that version anymore, the software would be lost. As that is covered by making executables, as I mentioned them. But what if I wanted to have access to the libraries that were used in the program? That wouldn't be possible. Because all we get in the source code is the dependency fetching, not the dependencies themselves.

It would be good to have an alternative where you get all that you need to compile the code again, not depending on fetching them from websites that might not even have them anymore.

This mentality of ephemeral code just adheres to the way big tech would like to do things, with programmed obsolescence.

An alternative to that way of doing things would be nice and would make sure we get access to the same working open source program in 30 or 40 years.

[–] [email protected] 6 points 1 month ago

I'm not sure there is a "mentality of ephemeral code" in open source projects. The source is literally available on github or similar, and anyone can mirror it as they like.

If it is popular enough, then the project is probably backed up in the github artic vault as well.

load more comments (2 replies)
load more comments (2 replies)