3 ms·
You only really need reproducible builds if you don't trust the source. So far, there hasn't been any evidence that any open-source projects are untrustworthy.
by Grishnakh 11y ago
You only really need reproducible builds if you don't trust the source. So far, there hasn't been any evidence that any open-source projects are untrustworthy.
- awinter-py 11y agoDoveryai no proveryai -- trust but verify. Wasn't sourceforge bundling an adware installer for a while?
- anonbanker 11y agosome of us are using verified gcc builds in Gentoo, and building stage3 installs in order to handle the trust aspect.