Item — HN Reader

> And you're fully auditing the source code before you run make.

I mean you can?

But that is the whole point when the source is available, it is easier to audit, rather than binaries.

Even with brew, the brew maintainers have already audited the code, and it the source to install and even install using --HEAD is hosted on brew's CDN.

1 comments

>Even with brew, the brew maintainers have already audited the code

Realistically, how much are they auditing? I absolutely agree with your sentiment that it's better than a binary, but I think the whole security model we have is far too trusting because of the historically overwhelming number of good-faith actors in our area both in industry and hobbyists