| 30 May 2025 |
 @s_r:matrix.org | I guess the thing that got me thinking about this is that I need to download any given module once, the first time I need it, but then I don't need to do that again even if I'm in a different shell | 18:34:07 |
| @s_r:matrix.org | which is convenient, but was counter intuitive at first | 18:34:32 |
| @s_r:matrix.org | I think I can live with that given that there is still a vendor hash | 18:34:55 |
 jrick | go's tooling already handles that with the module cache (albeit per-user) | 18:35:14 |
| @s_r:matrix.org | yeah, I know | 18:35:25 |
| @s_r:matrix.org | my issue is that it feels counter-nixy, but it is probably me, that's why I was asking | 18:35:49 |
| jrick | go cryptographically verifies the dependencies too so you're not going to risk building from different sources even if there is some download duplication | 18:37:19 |
| jrick | and the cache files are read-only so unless you intentionally try to break them... | 18:38:28 |
| @s_r:matrix.org | Yeah, that's probably ok | 18:38:29 |
| @s_r:matrix.org | the derivations are also build from fresh, if I understood the code right | 18:39:22 |
| @s_r:matrix.org | I guess they need to, if the build is sandboxed | 18:39:32 |
|  sleroq changed their profile picture. | 20:15:18 |
| sleroq changed their profile picture. | 20:16:24 |
