@mh4ckt3mh4ckt1c4s@infosec.exchange
2026-08-22 09:07 UTC
Currently investigating a bug blocking the build of the Arch Linux code package for several releases now. The problem comes from a mismatch between open-vsx.org and an extension who updated a release artifact on GitHub after open-vsx.org picked it and made it available on their website.
Developers from around the world, please, PLEASE use immutable releases on GitHub or anywhere else! The whole software ecosystem thanks you.
#archlinux #supplychain #packaging
Replies (0)
No replies.