Opensource is pure chaos but doesn't immediately look like that because people are so eager to learn & follow norms, except when they're not. But it is still pure chaos. Big orgs should have a buffer between them & the chaos. This buffer is going to be private pypi/etc proxies
OSS means as a user you got the right to fork, you don't have a right to not be f*k'd over by the maintainer unless you fork. So a risk adverse, big org approach should be: fork everything by perma-caching the packages in a proxy & cloning the underlying source repos.
♡ 2 ↻ 0