Please no. This is exactly what one should not do on linux. A user should either install these from its distribution or download the sources from the project repositories. If you include the sources, then they get stuck at a given and do not receive any security change; furthermore, you are not able to follow small upstream changes, that will accumulate; after a while bumping to the new library version will be a real, huge pain, and you'll have to rewrite everything. Not to mention that by freezing the libraries you don't get security updates, and this is perhaps the last thing you should do with a sensitive piece of code like this.
Germano0
commented
2 months ago
Please no. This is exactly what one should not do on linux. A user should either install these from its distribution or download the sources from the project repositories. If you include the sources, then they get stuck at a given and do not receive any security change; furthermore, you are not able to follow small upstream changes, that will accumulate; after a while bumping to the new library version will be a real, huge pain, and you'll have to rewrite everything. Not to mention that by freezing the libraries you don't get security updates, and this is perhaps the last thing you should do with a sensitive piece of code like this.