How this binary caches deals with security? How easily is to get rogue code from a perpetrator? How this works with third parties we need dynamically linked with libraries on the system?
For the first binary caching question: not everyone can upload binaries to the conan repository, I believe only allowed contributors can do that. I also believe these binaries are reviewed and tested (by many people using the tool itself). It's still not impossible to get malicious code in, just like in any open source project. It's worth noting that you can host your own binary cache conan server, so you can guarantee that only pacakges you or your team have built before are used. Check out the "conan remotes" section in their docs. Regarding the system library questions: in the conanfile, you can specify system libraries needed (such as "libsdl2-dev"). It will check that those libraries exist in the consumer machine, if not it will give you an error saying you need to install such library. You can also let conan install system libraries for you, although I do not recommend these settings.
Ffs Micha, if you care so much about security that you’d overlook a package manager with a design similar to others used in 99% of mainstream languages, just walk away and create your dumb little submodules, as if that’s any more secure 😂
It was good, but it would have been better if you had covered all the things you said you weren't going to cover. A more detailed and comprehensive guide to conan is definitely lacking. Some people just don't learn as well from reading documentation as they do from a video tutorial of someone who truly grasps the concepts.
