in reply to ActiveState to Strawberry?
I don't recommend switching any corp/buisness over from ActiveState to Strawberry because they are not even remotely the same thing.
Strawberry is just perl with CPAN and will download whatever you want from CPAN.
Active state is meant to a refined collection of modules where each update to them is reviewed at a code/manual level to ensure you are not installed malicious code. It is meant to be a sandboxed build to limit the code run to only things reviewed/trusted.
While Perl/CPAN does at least seem to need peer review (of a new users work), other languages (especially python and JavaScript) have shown what can happen through blindly trusting online repositories: people can name-squat and a single typo in a module name can have you downloading malicious code. Module owners can go-bad because of political/social/economic reasons and update their own modules maliciously.
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^2: ActiveState to Strawberry?
by stevieb (Canon) on Mar 11, 2025 at 03:55 UTC |