I do not pretend to any expertise on the details, just that this discussion reminded me of this page I read once: https://www.nongnu.org/lzip/xz_inadequate.html It points out "inadequacies" with the .xz format.  It might be out of date by now, I don't know; just bringing it to the attention of the esteemed readers.

~mark

On 9/27/25 5:02 PM, Collin Funk wrote:
William Bader <[email protected]> writes:

As long as there are mirrors of coreutils on github, could people who
need a tar.gz or a zip use the github feature to download any tag or
commit by url?
Good point.

However, those snapshots are not a substitute for tarball releases since
you will have to run './boostrap' to fetch the gnulib files from the
internet among other things.

Also, the git tags are gpg signed but not the snapshot tarballs. So I
don't think distributions would ever use them.

Collin

Reply via email to