Tweet by @dyz_alex
@kdrag0n stupid question from someone who knows very little about all of this: why are there no MD5 sumchecks for tarballs in place to make sure they actually align with the committed source code?
— alex (@dyz_alex)
Mar 30, 2024