* shirish शिरीष: > I was shared this [1] and while it's important, it is equally > important to point out that the work isn't complete atm. From what > little I know, almost all Debian's work is now using git (there may be > some subversion, some mercurial repos) but most of the work has now > been using gitlab/salsa [2] .
> 1. https://lwn.net/SubscriberLink/811068/cfeb6a67b8dfbe47/ > 2. salsa.debian.org The Salsa service is not essential for package maintenance and is kept at arm's length from the archive. Debian does not build directly out of Git, uploaders still have to create a self-contained source package by an out-of-bands process. Whether that is better than building from essentially a SHA-1 hash (like building out of Git would be like in some obvious implementations) in terms of the audit trail it provides is difficult to decide.
