STOP DOING VENDORING

libraries were not supposed to be bundled with apps

years of software packaging yet no real world use found for 2000 different copies of log4j on the same computer

wanted to automatically include libraries anyway? we had that already, it was called dependency resolution

“hello i would like to port chromium’s webp buffer overflow fix to discord”

they have played us for absolute fools

edit: this topic is obviously a little more complicated than I presented it here, see https://0w0.is/notice/AaLMoxCpxi9rY0aZbU