in reply to ActiveState to Strawberry?

I don't recommend switching any corp/buisness over from ActiveState to Strawberry because they are not even remotely the same thing.

Strawberry is just perl with CPAN and will download whatever you want from CPAN.

Active state is meant to a refined collection of modules where each update to them is reviewed at a code/manual level to ensure you are not installed malicious code. It is meant to be a sandboxed build to limit the code run to only things reviewed/trusted.

While Perl/CPAN does at least seem to need peer review (of a new users work), other languages (especially python and JavaScript) have shown what can happen through blindly trusting online repositories: people can name-squat and a single typo in a module name can have you downloading malicious code. Module owners can go-bad because of political/social/economic reasons and update their own modules maliciously.

Replies are listed 'Best First'.
Re^2: ActiveState to Strawberry?
by stevieb (Canon) on Mar 11, 2025 at 03:55 UTC

    What?

    ActiveState's "refined collection of modules where each update to them is reviewed at a code/manual level" are simply packaged CPAN modules:

    ActiveState maintains repositories of precompiled CPAN packages that can be installed with either the PPM command-line client, or the PPM GUI application.

    ...and:

    ActiveState downloads all new packages from CPAN once a day and tries to build them for each supported platform.

    Please stop fear mongering. ActiveState is nothing more than Perl bundled in such a way as to cause lock in.