Hello, On Sun 03 Aug 2025 at 12:27pm +02, Andrea Pappacoda wrote:
>> I don't think I fully understand the implications. My default >> position is that the answer should be "no" unless one of us *does* >> understand the implications :-). > > One different example which may illustrates the "unexpected" results > which this could lead to is this one. Here, the tarball is created with > a file containing "evil" content, while in the upstream/latest branch > only the "good" content is stored. Upon tarball checkout, the good > content gets replaced with the evil one: I thought that the .delta files were mostly to cover, for example, the tarball containing autotools-generated files that aren't in git? Isn't that a key use case? -- Sean Whitton
signature.asc
Description: PGP signature
