Quentin Leroux Michaud
mh4ckt3mh4ckt1c4s@infosec.exchange
<p>Cybersecurity researcher, Arch Linux Package Maintainer, FOSS enthusiast.</p>
Posts
-
View post
Currently investigating a bug blocking the build of the Arch Linux code package for several releases now. The problem comes from a mismatch between open-vsx.org and an extension who updated a release artifact on GitHub after open-vsx.org picked it and made it available on their website. Developers from around the world, please, PLEASE use immutable releases on GitHub or anywhere else! The whole software ecosystem thanks you. #archlinux #supplychain #packaging