Join Nostr
2025-03-02 02:15:00 UTC
in reply to

LisPi on Nostr: I'd recommend against using Quicklisp, its security practices are dubious. I instead ...

I'd recommend against using Quicklisp, its security practices are dubious.

I instead recommend cloning repositories (or symlinking them) to $XDG_DATA_HOME/common-lisp/source after auditing them.

Then in $XDG_CONFIG_HOME/common-lisp/source-registry.conf.d/50-user.conf writing: (:tree (:home ".local/share/common-lisp/source"))

This will allow ASDF to use sanely-handled dependencies.

If somewhat-automatic installation of libraries not in one's distribution is desirable, then the use of Guix and adding its path equivalent under $GUIX_PROFILE to the source-registry.conf.d configurations would be an option.

All this per the info manual: (info "(asdf) Controlling where ASDF searches for systems")