3 ms·
Seems like we need some kind of inter-repository git. Allowing for signed commits and version control between repositories.
by contravariant 8y ago
Seems like we need some kind of inter-repository git. Allowing for signed commits and version control between repositories.
- cat199 8y agoYou get this type of security inherently via most os-level packagers which check upstream tarballs especially the ports-like ones which are primarily designed for from-source usage. Unfortunately there has been a trend to ignore these and install directly of late, especially for dynamic language modules.