3 ms·
The "blue badges" of software packages. Honestly not a bad idea but who and what determines a package to be "trusted"? Will there be transparency into the decis
by greatjack613 3y ago
The "blue badges" of software packages. Honestly not a bad idea but who and what determines a package to be "trusted"? Will there be transparency into the decisions?
- woodruffw 3y agoThis has nothing to do with trusting packages; it’s about delegating publishing authority to a service like GitHub Actions.
- verdverm 3y agoHow do you know that what the action is doing is trustworthy?
- Takennickname 3y agoYou didn't read the link.