3 ms·
> It's simply solvable by refering to a commit hash It really ought to refer to a signed tag that the package manager verifies before installing the package.
by u801e 9y ago
> It's simply solvable by refering to a commit hash
It really ought to refer to a signed tag that the package manager verifies before installing the package.