4 ms·
> Even if they did, how to check final the uploaded binary? By requiring and verifying a reproducible build. It would be awesome if open source apps on an app
by amluto 4y ago
> Even if they did, how to check final the uploaded binary?
By requiring and verifying a reproducible build. It would be awesome if open source apps on an app store has a badge indicating which commit of which git tree they came from and only allowed updates that similarly come from public trees.
Even failing that, favoring reproducible builds would add a considerable degree of traceability to the entire distribution process.
- lupire 4y agoEven easier for the platform owner: if they have your code, then can compile it themselves.