I do not pretend to any expertise on the details, just that this
discussion reminded me of this page I read once:
https://www.nongnu.org/lzip/xz_inadequate.html It points out
"inadequacies" with the .xz format. It might be out of date by now, I
don't know; just bringing it to the attention of the esteemed readers.
~mark
On 9/27/25 5:02 PM, Collin Funk wrote:
William Bader <[email protected]> writes:
As long as there are mirrors of coreutils on github, could people who
need a tar.gz or a zip use the github feature to download any tag or
commit by url?
Good point.
However, those snapshots are not a substitute for tarball releases since
you will have to run './boostrap' to fetch the gnulib files from the
internet among other things.
Also, the git tags are gpg signed but not the snapshot tarballs. So I
don't think distributions would ever use them.
Collin