Buttcoin

which itself is a shitty implementation of ideas stolen directly from Nix (specifically it’s a much worse nix run or comma with bits and pieces yanked straight from direnv), but with the, ah, sensibilities that can only come from the experience gained implementing one of the worst package managers

I dug in and there’s also this related mash thing that appears to just be an unvetted index of scripts you can pull in and execute with no idea what they’ll actually do

We have not vetted any of the scripts mash can run and (currently) they can do anything they want to your computer.

We fully intend to add sandboxing and user reporting, but you have found mash super early in its life so you must practice caution in your usage.

fucking genius. your killer app is a vector for malware cause in your excitement to release this shit you designed in like 10 minutes, you decided to push all the hard (and/or impossible — fucking sandboxing?) parts off until later