>>>>> On Fri, 16 Mar 2018, Ulrich Mueller wrote:

> I think the conclusion is that github generates tarballs on the fly,
> and therefore we cannot rely on them being invariant over a long time.
> They may be susceptible to changes in git, in tar, or in gzip.

In fact, only git and gzip (because the tar archive is built by git
itself). This doesn't change the argument, though.

Ulrich

Attachment: pgpr_Jks8z8Wl.pgp
Description: PGP signature

Reply via email to