Maybe using prebuilt downloaded binaries not the default feature?

[vlovich]

I feel like building from scratch rather than downloading prebuilts is more aligned with the way the Rust community approaches trust in the software supply chain. Should we change the default so that sherpa-onnx is built from scratch and the user has to explicitly opt to using prebuilt binaries? Especially with the whole attempted backdoor of SSH by way of binaries part of the XZ build process, makes me nervous to have binaries be part of the build by default, especially since sherpa-onnx isn't horribly expensive to build from scratch anyway.

[thewh1teagle]

Hi,
sherpa-onnx is expensive to build from source, and that's the reason I chose to enable the feature by default.
You can disable it easily with default-features = false.

with the feature enabled it takes less than a minute to build on most systems. with the feature disabled it takes 2-10 minutes to build depending on the hardware and the network