FYI, the "legal-disc...@apache.org" mailing list is having an active discussion about doing reproducible builds for Apache Software Foundation (ASF) projects under the topic "RE: Binary channels". You can see that here: https://lists.apache.org/list.html?legal-disc...@apache.org
Their legal group is concerned about binaries released by the ASF - officially the ASF only releases source code, but in practice they release binaries - and how do they know they're okay? One answer is to use reproducible builds. I've been advocating for reproducible builds from the ASF, and thought you'd like to know. --- David A. Wheeler _______________________________________________ rb-general@lists.reproducible-builds.org mailing list To change your subscription options, visit https://lists.reproducible-builds.org/listinfo/rb-general. To unsubscribe, send an email to rb-general-unsubscr...@lists.reproducible-builds.org.
