Odin should provide build scripts for all of its vendor dependencies, rather than relying on precompiled binaries

[1player]

Now that Odin 1.0 is on the horizon, perhaps we should provide build script to compile vendor libraries rather than hope whoever maintains them does not inject malware into them. See for example the Lua binaries uploaded by @gingerBill with no instructions (that I can find) on how to recompile them from Lua source: https://github.com/odin-lang/Odin/tree/master/vendor/lua/5.4/linux

Right now Odin suffers from the extreme version of Ken Thompson's "Reflections on Trusting Trust", and it's not idea for a programming language that's reaching a stable version. Also it's not very clean for the source code repo to just contain precompiled binary without any sort of reproducibility. Granted, some dependencies have their own build script, but not all of them.

I'm glad to open a tracking issue to rectify the problem, but I wanted to first make sure this is a known issue with the core maintainers before wasting my time if somehow the current situation is fine. Strangely enough I've not found a single issue or discussion talking about this at all.