PyTorch and the PyPI supply chain

Posted Jan 12, 2023 10:12 UTC (Thu) by ballombe (subscriber, #9523)
In reply to: PyTorch and the PyPI supply chain by taladar
Parent article: PyTorch and the PyPI supply chain

> But stuff in the distros is just as bleeding edge, just bleeding edge backports that a person who is comparatively much less familiar with the code base developed and virtually nobody tested, usually with a lying version number on top of it.

The code does not run in a vacuum. Distributions are much more familiar with the environment where the code will run,
and most distribution developers are also part of upstream. they also tend to have more user-aligned view than upstream. user-hostile upstream do exist.