2 ms·

I do it by downloading it and building it myself, or trusting a large beaurocracy running the project to audit the source and produce signed packages, on behalf

• steveklabnik 8y ago
  It doesn't need any; you build it locally, and then put the wasm in the package when you publish.
  • ori_b 8y ago
    That makes auditing that the wasm matches the code pretty hard. (It's also a problem with adding minified JS). Auditing just the code is hard enough as is. :(