4 ms·

Redhat's entire reason for existence is to prevent this.

• dada216 4mo ago
  not really, no.
  • rob_c 4mo ago
    So why else do we pay someone to package and certify/verify open source projects? This is absolutely 90++% of what should be RedHats core day job.
    • duozerk 4mo ago
      Non-profit Open Source distributions also and already package and verify open source packages (arguably often with a higher quality of analysis than Red Hat). You pay red hat for compliance reasons (availability of a support you'll never call, mostly).
      • rob_c 4mo ago
        > You pay red hat for compliance reasons You may, have you heard of docker?
• cozzyd 4mo ago
  did RPM packages get compromised?