There is also no way to verify that the software that is being installed is not going to do anything bad. If you trust the software then why not trust the installation scripts by the same authors? What would a third party location bring to improve security?

And generally what you are describing is a software repo, you know the one that comes with your distro.

Protip: Don't write 600 lines of code without ever testing it at all. And by testing I mean anything, manual testing included or even just compiling it or running a linter over it. Do things incrementally and verify things at each step to make sure you are not drifting off course by some faulty assumption you made near the start.

Documentation is generally considered one of the stronger points of rust libraries. Crates.io is not a documentation site you want https://docs.rs/ for that though it is generally linked to on crates.io. A lot of bigger crates also have their own online books for more in depth stuff. It is not that common to find a larger crate with bad documentation.

*in the web dev domain.

Which also has a very disproportionate representation on the web - for obvious reasons. And it is very easy to get stuck in the mentatilty that all you see if the domain you are in so you over estimate how large it is compaired to other domains. But lets not forget general application development, old large scale enterprise, embedded systems, game dev, machine learning and many more spaces where JS/TS are barely used at all.

And the basket will be upside down.

Inheritance, which allows classes to reuse state and methods of other classes.

This is the absolute worst feature of typical OOP languages. I don't know of any case where it is the best way to solve a problem and very often becomes a nightmare if you don't get the exact hierarchy of types right. It becomes a nightmare once you have something that does not quite fit into the assumptions you original made when you started out. Which happens all the time.

The examples given with the logger can be solved just as well if not better with interfaces/traits with solutions that don't have that problem.

They do mention it on that page:

However, if presented with a valid order from a Swiss court involving a case of criminal activity that is against Swiss law, Proton Mail can be compelled to share account metadata (but not message contents or attachments) with law enforcement.

The only ever claim to encrypt message contents and attachments. And explicitly call out account meta data here as something they can hand over if requested by law enforcement. They also mention they are not good vs targeted and governmental level attacks:

There are, however, some risks for users facing a strong adversary, such as a government focusing all its resources on a very specific target.

And explicitly mention they might be compelled to log and give up information like ip adresses:

if you are breaking Swiss law, a law-abiding company such as Proton Mail can be legally compelled to log your IP address.

Magic: The Gathering Arena? That has a platinum rating on proton DB so should work just fine on any modern Linux distro, like thousands of other games. No need for a dual boot unless you have one of a few problematic games.

Concurrency is not easy if you need the output and exit status of the commands. Fire and forget concurrency/parallelism is easy in any language. It is when you need to sync state up that it becomes hard.

That abstract is full of oh won't anyone think of the profits vibes.

What do you mean by handled seperatly? Both wayland compositors and X11 use libinput nowadays to get input from the hardware. But then it needs to be routed to the right application - the one that is in focus minus any global shortcuts that the compositor might want to deal with. The compositor is what understand what application has focus and thus is what knows where to send input to so it makes sense for it to handle that. It is not just about where to render windows - but manages all events such as input that applications require.

Did you read the article? In this case he put in quite a bit of work to generate and alter the image:

He sent a written explanation to the Copyright Office detailing how much he’d done to manipulate what Midjourney conjured, as well as how much he fiddled with the raw image, using Adobe Photoshop to fix flaws and Gigapixel AI to increase the size and resolution. He specified that creating the painting had required at least 624 text prompts and input revisions.

And he is essentially claiming that the work should be transformative enough to be copyrightable. Even if the original image is not.

That all makes this case more interesting then a lot of others in the past as it is about AI generation with some human input. Not just someone generating vast amounts of work to find something they like (which likely will never be copyrightable). When this goes to the courts will will help to define the line of how much and what type of alterations are required to claim copyright over the works.

Not all AI work is the same, but I am glad that the copyright office is pushing back on these claims. Putting the burden of proof onto the author that they did have enough input into the work. The big open question ATM is how much input is needed and what that input can look like.