Elektrine lite

← Feed

crystal

crystal@hachyderm.io

<p>Open-source forge software enthusiast, biggest LLM hater. <a href="https://hachyderm.io/tags/nobot" class="mention hashtag" rel="tag">#<span>nobot</span></a></p>

Posts

  • View post

    RE: https://floss.social/@forgejo/116652655395588085 To clarify what is going on here in detail while keeping it in a single post, the &amp;quot;vulnerability&amp;quot; as disclosed is that a package which is uploaded to a public user or organization and linked to a private repository remains public. This behavior is, in fact, intended. Forgejo&amp;#39;s package registry stores packages under the user/organization namespace, and packages inherit their visibility from the user or organization th...