9 ms·
This is an "in addition to" problem though, not an "instead of" problem. Having code reviewed the PKGBUILD doesn't mean the upstream software is safe to use, h
by kpcyrd 3mo ago
This is an "in addition to" problem though, not an "instead of" problem.
Having code reviewed the PKGBUILD doesn't mean the upstream software is safe to use, having reviewed the upstream software and it's dependency tree doesn't mean the PKGBUILD is safe to use.
- dsp_person 3mo agoAlso have realized at some point that reviewing the PKGBUILD and code in github repo still doesn't check whether the github release files are compromised.
- backscratches 3mo agoBuild it yourself or bust
- deleted 3mo ago[deleted]
- deleted 3mo ago[deleted]