448
400+ Arch Linux AUR Packages Compromised in a Supply Chain Attack Deploying Infostealers (cybersecuritynews.com)
submitted 4 months ago by to c/technology@lemmy.world
144 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 4 months ago (1 child)

Thats like nix packager, right? Looks interesting to layer on top. Says they are all reproducible builds which is nice.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 3 points 4 months ago* (last edited 4 months ago)

    Yes, Guix is initially a clone of Nix and has still remains of shared code (the build daemon).

    Differences:

    • Guix packages are defined in a Scheme dialect called Guile, a nice minimal functional language
    • Guix was created as a GNU project and stresses the importance of free software with strong copyleft
    • strong focus on long-term reproducibility and capability of tracking the sources
    • everything is built from source
    • very good and well organized documentation
  • permalink
  • fedilink
  • source
  • parent