you neatly clipped the most important part of my email: I quoted you
saying that plugins can even change core behaviour!
NO! The point was that I will not gladly run anything which could change
the core. If I know it touches only the UI, there is no problem.
If I get a shell script using git-core programs to do its job, I
_know_ that my repository will not be fscked afterwards.
And _that_ was the whole point of my email.
Most of it comes down to trust. And yes, you are correct, I will not run
git with some obscure module LD_PRELOADed that some guy from some planet
sent me.
You might have missed my argument being about the SCM, and not the
universe and all the rest.
Oh, but NO! An extensibility mechanism which allows for a fragile system
_is_ silly. Not my rejection of it.
Just take an example (illustrating that once again, one should not
attribute everything to malevolence...): I write a plugin for bzr. It does
really wonderful things, it even cooks you dinner.
Only that I happened to make a small mistake (if you followed some threads
on the git list, you'd know that small mistakes are a hobby of mine), and
by this mistake, your repository is ... gone. Small mistake, big
consequence. That is wrong with such a powerful system which caters for
developers, which are human after all.
Note that such a small mistake would be much more likely caught in git: if
it touches the core, plenty of eyes look at it.
Ciao,
Dscho
-
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html