Publicizing MacPorts [installation]

[Joshua Root]

On 2021-5-23 20:40 , Artem Loenko via macports-dev wrote:
> If you ask me, `curl | sh` is a better option than `sudo make install`.
> Even if we compare them both as anti-patterns.

If you haven't done any verification of the integrity of what you're 
installing, 'make install' is certainly also a bad idea. But at least 
you had the opportunity to verify the gpg signature or whatever of the 
tarball you downloaded before running that. (And sure, a lot of people 
don't, hence the preference of the pkg installer for general use, which 
will refuse to install if the signature can't be verified.)

> Plus, `make` requires a few dependencies. But when you install a package,
> all the logic/doctor checks can be implemented on the `ports` binary level.
> Install CLT, Xcode, check the environment, etc. Simple is better.

Sure.

- Josh