Hacker News new | past | comments | ask | show | jobs | submit login

Have been using asdf (with Ruby and JS) for years, haven't had a reason to look for something else yet.



I stopped using asdf as it's a huge security nightmare. Literally, you're running third-party Bash scripts, which have no checksums and absolute no security considerations! Even WordPress is better as it controls the source code of the standard plugins unlike asdf! Also, I often face an issue with GitHub IP quotas as each formula is on its own, often doesn't follow any basic security best practices or conventions, and does not use GITHUB_TOKEN to authenticate against the GitHub API. 90% of the plugin code for asdf is the same. I'm not sure why there's no basic framework that uses eget or other now-popular tools to fetch binaries for the proper arch from GitHub releases! That's why I use aqua [1], which just does this, and unlike asdf, is extremely fast as it has caching and downloads binaries in parallel.

[1]: https://aquaproj.github.io/


Asdf is great - I'm not knocking it at all and have built several scripts for it over the years - but I think mise might be a better tool for someone starting out from scratch: https://github.com/jdx/mise. These days I'm using nix, but it's not for everyone.


Yes, asdf just works for me. I can't recall a single issue in like 8 years of using it




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: