| 2 Oct 2025 |
 dish [Fox/It/She] | sigh yeah | 04:19:08 |
| dish [Fox/It/She] | fuck | 04:19:12 |
| dish [Fox/It/She] | well im not about to vendor a 538kb lockfile just to avoid ifd | 04:19:27 |
| dish [Fox/It/She] | so i guess that package i was looking at won't be repackaged for a while | 04:19:38 |
 Emma [it/its] | meanwhile noVNC not locking packages at all | 04:20:59 |
| Emma [it/its] | not even to major versions | 04:21:07 |
| dish [Fox/It/She] | what the | 04:21:11 |
| dish [Fox/It/She] | 😠| 04:21:15 |
| Emma [it/its] | https://github.com/novnc/noVNC/blob/master/package.json | 04:21:30 |
| dish [Fox/It/She] | oh gods | 04:21:30 |
| dish [Fox/It/She] | i just looked at their repo | 04:21:33 |
| dish [Fox/It/She] | yeah | 04:21:33 |
| dish [Fox/It/She] | wow thats awful | 04:21:36 |
| Emma [it/its] | not making this up, everything is "latest" without a lockfile | 04:21:38 |
| dish [Fox/It/She] | hmm yes i love security | 04:22:02 |
| dish [Fox/It/She] | | 04:22:14 |
| Emma [it/its] | yeah, i feel bad for the Proxmox-NixOS folks | 04:22:22 |
| Emma [it/its] | the proxmox web ui relies on novnc 😠| 04:22:51 |
| dish [Fox/It/She] | this is why i only give myself one painful project at a time | 04:30:02 |
| dish [Fox/It/She] | and currently thats minimal-bootstrap | 04:30:07 |
| dish [Fox/It/She] | though they seem to not even need the package-lock so 🤷 | 04:32:31 |
| Emma [it/its] | cant you fetch them theoretically? or would that still be IFD | 04:33:28 |
| Emma [it/its] | im guessing fetch* is still a derivation... | 04:33:54 |
| dish [Fox/It/She] | well | 04:34:09 |
| dish [Fox/It/She] | ifd only applies to fetching nix files from urls afaik | 04:34:19 |
| dish [Fox/It/She] | if there was a nixos/trusted-lockfiles repo or whatever that stored these lockfiles | 04:34:38 |
| dish [Fox/It/She] | we could fetch it and then just copy it in during postPatch | 04:34:51 |
| Emma [it/its] | what if we moved nodePackages to a separate repo? | 04:35:26 |
| dish [Fox/It/She] | i mean we could do that but | 04:35:35 |
| dish [Fox/It/She] | its still unmaintainable | 04:35:38 |
