New modules: binaries or compilation from source preferred for deps?

[christianfl]

Hey there!

I couldn't find any info about this in the documentation. Do you have a preferred way when using external programs within new bbot modules? Should precompiled binaries be used if available for all supported arches or is it better to compile in the setup routine?

[TheTechromancer]

Precompiled binaries are preferable if they're from a trustworthy source and cover a good range of OS/architectures. This helps save time and CPU on the scanner machine. We use this method for all the projectdiscovery tools. But some tools like massdns don't have those kinds of auto builds, so we opt to compile them.

[christianfl]

OK, thanks for clarification!
Maybe some day it could be an aim to endorse reproducible builds for used binaries in the modules.