Hi Marc e.a., On Sat, Feb 21, 2026 at 11:36:04AM +0100, David Kalnischkies wrote: > Am Fri, Feb 20, 2026 at 10:23:03PM +0100, schrieb Marc Chantreux: > > As I finally need packaging skills at work, I joined this list so I can > > contribute in a more productive way. <snip> > > > * I maintain poor quality packages (no source, ...) with up to date versions > > of tools like spago or crystal and I know lot of people are doing > > this. I know there are security issues about it but I wonder how to > > create have joint forces and more trust on this. > > I suppose the best course of action is to just start… as in, join forces > around a repository in salsa and perhaps start with a PPA-like archive > in debusine to distribute it. Maybe with the goal to ship it in non-free? > (Disclaimer: I have literally no idea what "spago" and "crystal" is)
You might also be interested in the extrepo package: the "External repository manager". I maintain a non-Debian apt-repo myself, fwiw & fyi. Bye, Joost

