3 ms·
That’s my point. If you make it so people are required to go to other sources of packages for normal operations, then it normalizes untrusted distributors of pa
by cortesoft 4y ago
That’s my point. If you make it so people are required to go to other sources of packages for normal operations, then it normalizes untrusted distributors of packages.
- ddevault 4y agoI don't understand how your response follows from the points I made. In any case, people who need a package should add it to their distributions. This is what we should normalize. Especially for users like developers who depend on software libraries, who already have the necessary skillset and motivation.