• corsicanguppy@lemmy.ca
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    4
    ·
    5 hours ago

    If only they weren’t flatpaks. Ask a release engineer about importance of artifact validation and single source of truth if you don’t know why that’s a risk.

    • WbrJr@lemmy.ml
      link
      fedilink
      arrow-up
      7
      ·
      5 hours ago

      Im not in this field, but the risk is that flatpak can be distributed by anyone? But flathub provides validated Tag for entities provoding trustworthy flatpaks, no?