31 Jan
2014
31 Jan
'14
8:29 a.m.
On 01/31/2014 02:21 PM, Erik Hesselink wrote:
Yes, if there's no original repo to compare against, you can probably fake a lot of stuff. I cannot see how to easily guard against this,
Maybe have people provide a diff against the latest version instead of a repo/tarball ? That is easy to generate, review, and apply.