2 ms·
This is the upstream source control. The article talks about the Debian packaging source not being in git (on e.g. salsa.debian.org).
by ottoke 1y ago
This is the upstream source control. The article talks about the Debian packaging source not being in git (on e.g. salsa.debian.org).
- simoncion 1y agoEh, I didn't bother to read TFA. So, it was ambiguous as to whether OP was talking about the projects or Debian's packages of the same. I figured it was more likely that OP was talking about the projects and proceeded accordingly. If that quote's about keeping Debian packaging in source control, I don't really see much benefit for packages like coreutils and bash that generally Just Work(TM) because they're high-quality and well-tested. Sign what you package up so you can detect tampering, but I don't see you really needing anything else.