Yes. I saw that. I was giving you my assessment based on the rest of the technical details in that readme. It doesn't look like vdm is dealing with any part of the dependency repos (.git directories) other than to download them. In fact, they even mention deleting those .git directories. Please let me know if you think I misinterpreted any of those details.

It could in theory, be a faster way to checkout a different branch. Switching branches is a lengthy operation that involves a lot of deletions and replacements in the working tree. A fuse mount would simply be a rendering of the tree object. It doesn't need to do anything until something is accessed. Even then, it would simply be a rendered view of a blob in the repository.

+1. Git is one of those projects that supply official, authoritative, comprehensive and easy-to-understand documentation.

Git rebasing is extremely confusing. I say this as someone who does it on a daily basis. Rebasing takes significant effort to teach. The fundamental concepts are different from regular git use - it makes an abrupt jump from snapshot model to diff model.

A large section of developers simply don't reach that level of proficiency in their entire career - instead depending on the organization's expert for those tasks.

What makes Perl or Raku interesting? What are some applications where they are the ideal languages?

They moved there from IRC, a long time ago. Zulip is actually well designed for projects like these. It feels like what Slack and Discord should have been.

Sorry. I am not willing to waste my time typing out examples for someone who is too stubborn and lazy to just Google it - It's a topic that has been discussed a billion times. If you want to paint me as incapable for that, go ahead - your opinion is worth as much as your willingness to just search for an answer yourself.

Thanks! I missed that one. They are awesome!

I have been programming in Python for nearly two decades now. This is the first I'm hearing about the Optional improvements to Python's type hints/annotations. Thanks a lot for this. I'm going to take a re-look into type hints.

As for Rust, recall that Result is also a very similar union type.

I'm aware that Rust enums, including Result, are tagged unions. However, my understanding is that it's not like that in Python. Python's duck typing is enabled by typing the values, rather than the variables. A variable can point to a value of any type. Am I getting this wrong? Or is Optional different somehow?

Also, do you know anybody who has solved it in opensource?

I forgot to mention that this is a problem on every major language registry - especially PyPI and NPM.

How would you enforce the solution on some dude writing code in his basement to "just make it work" on his 1 day off from an otherwise busy life?

There are two things to consider. The first is that all major open source languages are run by foundations with big players and a lot of funding and donations. It's probably a good idea to invest in a paid team dedicated to security. I'm sure everyone's thought about it already but hasn't done enough so far.

The second fact is that professionals - especially security companies - do occasionally report them. Like this story, for instance. So they are doing something right and it's possible. It's a good idea to fund them and increase their scope (hopefully, they won't introduce any malware just to claim the prize).

That can be done. But how do you trust a software at runtime if it can't be trusted at build time?

This is more of a supply chain issue. Users are likely to build only reputed crates. However, their dependencies may not be that reputed. For example, malicious actors may buy out a common and deeply buried dependency and use that to propagate malware (this regularly happens with browser extensions - even open source ones). How do we ensure that this doesn't happen?

GUI just doesn't give you the level of control or keyboard driven workflow that CLIs can. You can even use plain kernel terminals or bootloaders if you know CLI. Text config files are also extremely easy to configure. There are only a few legitimate cases where CLI isn't enough. That includes gaming, 2D and 3D graphics design and CAD/CAM. And almost all of them implement their own GUI anyway.