diff --git a/02-DECISIONS/0205-software-the-distribution-does-not-package-ships-as-a-pinned-archive-of-the-module.md b/02-DECISIONS/0205-software-the-distribution-does-not-package-ships-as-a-pinned-archive-of-the-module.md index 2cf6ab4..4c60c5a 100644 --- a/02-DECISIONS/0205-software-the-distribution-does-not-package-ships-as-a-pinned-archive-of-the-module.md +++ b/02-DECISIONS/0205-software-the-distribution-does-not-package-ships-as-a-pinned-archive-of-the-module.md @@ -47,7 +47,8 @@ refused in review. ## Consequences -- The catalogue grows by the size of what it vendors. The prompt theme is about two megabytes. +- The catalogue grows by the size of what it vendors: 1.4 MB for the prompt theme at the pinned + release. - Upstream's security fixes reach a machine only when somebody updates the module. That is the same trade every pinned dependency makes, and it is visible: the version is in the module. - **What got harder:** a vendored program that downloads more at run time, as the prompt theme does