3 ms·
Who is behind this? It's a new Github org, the committer (https://github.com/OttoCoddo https://github.com/OttoCoddo) has a totally private Github profile. There
by croemer 3y ago
Who is behind this? It's a new Github org, the committer (https://github.com/OttoCoddo https://github.com/OttoCoddo) has a totally private Github profile. There's no name in "Legal". Sure, one can be anonymous, but I won't download it, don't trust it.
- Retr0id 3y agoThey also mention depending on https://github.com/SCLOrganization https://github.com/SCLOrganization, which appears to have single similarly anonymous maintainer. In fact, SCL has exactly two libraries, SQLite and Zstandard, so presumably it's the same developer https://github.com/SCLOrganization/Libraries https://github.com/SCLOrganization/Libraries
- OttoCoddo 3y agoMe. It is the point: if you trust a project based on "who" made it, my friend, that is the start of the big problem we are facing in this current situation of tech. Just look at the code, build it yourself, and check the license. Pack is made to be a private option; future locking end encryption options will solidify that. Trusting the author is not the correct way to verify the security and safety of such a tool.