Michel Alexandre Salim wrote:
> I experienced this recently with another project (openSUSE's build
> service client) -- GitHub lets you download a project's tagged
> snapshots as tarballs, but Gitorious does not have this functionality.
But on-demand autogenerated tarballs are evil because they usually don't
have reproducible checksums, so there's no straightforward way to verify
that the tarball has not been altered.
Kevin Kofler
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
