Currently investigating a bug blocking the build of the Arch Linux code package for several releases now. The problem comes from a mismatch between open-vsx.org and an extension who updated a release artifact on GitHub after open-vsx.org picked it and made it available on their website.
Developers from around the world, please, PLEASE use immutable releases on GitHub or anywhere else! The whole software ecosystem thanks you.
#archlinux #supplychain #packaging
Remote
Quentin Michaud
@mh4ckt3mh4ckt1c4s@infosec.exchange
PhD student in cybersecurity, ArchLinux Package Maintainer, FOSS enthusiast.
0 Followers
0 Following
3 Posts
Joined June 21, 2024
Open post
Replying to
@itsfoss@mastodon.social for those who see this and who want to follow Debian on Mastodon, the account listed on their website is @debian@framapiaf.org.
10
2
1
0