4 ms·

You'd probably still want a centralized repo of checksums, otherwise it may be more difficult to verify the authenticity of the packages

• thedevindevops 7y ago
  That still wouldn't guarantee that the package contents isn't malicious