Duplicates of third-party libraries

Martin P. Hellwig martin.hellwig at dcuktec.org
Mon Dec 7 23:25:28 EST 2009


Ben Finney wrote:
> "Martin P. Hellwig" <martin.hellwig at dcuktec.org> writes:
<cut>
> 
> Along with the duplication this introduces, it also means that any bug
> fixes — even severe security fixes — in the third-party code will not be
> addressed in your duplicate. 
<cut>
I disagree, what you need is:
- An automated build system for your deliveries, something you should 
have anyway
- An method of tracking versions of your dependencies, again something 
you should have anyway
- And a policy that you incorporate bug fixes from your dependencies in 
your deliveries, something you should do anyway if you are serious about 
your product.

-- 
MPH
http://blog.dcuktec.com
'If consumed, best digested with added seasoning to own preference.'



More information about the Python-list mailing list