Follow-up Comment #4, sr #111180 (group administration):
> In this case it's the makefile that pulls in a single file from GNU: > - > https://github.com/richfelker/musl-cross-make/blob/fd6be58297ee21fcba89216ccd0d4aca1e3f1c5c/Makefile#L79 Oh! I see. This does NOT do a git fetch or git pull but is doing a wget via the gitweb interface. That means that everything I just said about using git fetch does not apply to this operation. This wget is probably okay. It's just a single file. But it feels problematic just the same because it is centralizing something that is best decentralized. But honestly for this exact type of operation I don't have a better answer for you. It's just going to have to fight its way through the botnets the same as the rest of us looking at the web human UI for such things. _______________________________________________________ Reply to this item at: <https://savannah.nongnu.org/support/?111180> _______________________________________________ Message sent via Savannah https://savannah.nongnu.org/
signature.asc
Description: PGP signature
