They are not subjective notions, we are not talking about philosophy we are talking about computing.
Please pardon me. I forgot that there are no subjective opinions concerning computing.
Doesn't matter, many software will be redundant and out of date.
It matters.
As I said, in this case, we have two versions of ffmpeg -- the user's system version and, apparently, the version specially compiled for MLV-App, as suggested by @masc. This is a special case and not "many software."
Furthermore, even with a package manager, the user usually still has to manually command an update -- auto-update mechanisms are commonly not the default.
In addition, "many" folks employ an "app" directory in their home directory for just such special cases. I have such a directory and it contains 13 apps, all up-to-date, except for the ones I specifically have not updated -- very easy. convenient and foolproof to do without a package manager and I never have to worry about a package manager inadvertently updating a package that I have intentionally downgraded. One more thing, such a directory makes it very
easy to run a downgraded version of an app , while also the "current" version of the app maintained by the package manager. Additionally, one of the apps
In the ffmpeg case, there would be no choice other than distribute the binary or give the package manager the order to compile the package itself.
Yes. So, the first "choice" applies here -- the MLV-App binaries are distributed in their own self-contained packages : Mac DMG, 'nix AppImage, Windows "whatever" (with it's own "installer?") and, potentially, a Linux tarball.
That's the point. This process can be easily automated.
No. Not through a package manager.
Trying to keep differing versions of the same app and differing versions of the same libraries with a package manager is difficult to set-up as a maintainer (and one first has to recruit such a maintainer), and can often be complex to set-up as a user.
It is easy enough just to unpack a tarball and run the app from there.
That's just false. Most package managers require signing with PGP. The files are transported over encrypted connection (TLS1.2 or recently 1.3) and files have integrity check with SHA256/512. If you don't see the security benefits here, I don't know what to tell you.
It's not false.
I said, "A package manager doesn't provide
***more*** security -- it basically just automates the install and reduces redundancy. There is nothing preventing someone from encrypting, signing and check-summing a Linxux tarball, a Mac DMG nor an independent Windows program."
So, one can also use PGP signing and check-summing with an independent tarball, AppImage or dmg (as I actually stated), just like a package manager might do.
Hence, a package manager doesn't provide
***more*** security than an AppImage, DMG, tarball, etc.
Indeed, there's not.
So, we agree that package managers don't provide more security, immediately after stating that assertion is false?
But these systems already have a unified solution, so why not use them?
For the reasons that I have repeatedly stated. Basically, it is often easier to distribute and run special apps (such as MLV-App) without using a package manager.
Those doesn't seem to be dependencies, they are in the software itself.
No. They aren't "in" the software. They are separate, independent files, as shown in the directory/file tree.
Of course not, that's the function of the package manager to put them there.
So, ignoring the mud-slog of having to set-up such
dependency functionality with each package manager, those libraries and shared objects are required by the main binary.
Thus, the binary
depends on those files.
Libs != dependencies
On the contrary, libraries are probably the most common software dependency.
This line of discussion has taken this thread off the rails, and I cannot keep repeating myself. I merely tried to offer improved instructions for the MLV-App focus dot pixels and to provide a Linux tarball of the AppImage, but it seems to have devolved into qualitative opinions and semantics arguments regarding package managers vs. self-contained packages.
I have to move on.