Re: Concerns Regarding the Choice of Rust for the Xfce Wayland Compositor

--===============4307490786908872835==
Content-Type: multipart/signed; micalg=pgp-sha256;
	protocol="application/pgp-signature"; boundary="0AUUGfYOay6YU2U3"
Content-Disposition: inline


--0AUUGfYOay6YU2U3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, 17 Jun 2026, 23:46:18 +0200, Brian Tarricone wrote:
> On Wed, Jun 17, 2026, at 14:07, Wojciech S. Czarnecki wrote:
> [...]
> >> > Xfce has always been trusted because its codebase is relatively smal=
l and auditable.
> >>=20
> >> This feels like a bit of a stretch to me.  Do people really think abou=
t Xfce in these terms? =20
> >
> > I do. =20
>=20
> I meant that as a general/statistical question.  If the answer is "30%
> of Xfce users care about this" then sure, that would mean I'd want to
> consider that more carefully.  But if it's 1% -- which I suspect is
> much closer to the truth -- then I can't really put much emphasis on
> this, given my own limited time and resources.

While I'm an Xfce user since years, I rather view this from a packager's
point of view. I maintain the Xfce packages (amongst other colleagues)
for openSUSE within their build system OBS. Every package has to be
buildable stand-alone, i.e. no access to the internet is possible. As a
consequence building packages using rust/cargo is a pita! Each such
package will then carry its own pre-downloaded data stuffed into a
vendor.tar file :-( If OBS would allow internet access during build,
such attacks as have been recently seen with the hacked npm based
packages on Arch Linux would also be possible here.

Again, this is my package point of view.

> Regards,
> Brian

Cheers.

l8er
manfred

--0AUUGfYOay6YU2U3
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=qVwJ
-----END PGP SIGNATURE-----

--0AUUGfYOay6YU2U3--

--===============4307490786908872835==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Xfce4-dev mailing list
[email protected]
https://mail.xfce.org/mailman/listinfo/xfce4-dev

--===============4307490786908872835==--