News for hackers. Stuff that matters.

A comment on Crev: dependency vetting with a web of trust. Parent comment

Re:Crev: dependency vetting with a web of trust by alexchamberlain on Friday January 04, 2019 @01:37PM (#18826473)
Yeah. For example, the original author could declare they own the copyright on xyz release and its released under a certain licence
[ Parent | on HN ]
Re:Crev: dependency vetting with a web of trust by wyldfire on Friday January 04, 2019 @01:41PM (#18826504)
That's stipulated by the crate metadata and the only authority of that claim is the author's, right? Why would you want/need bolstering of that claim by a web-of-trust? What would it mean if the WoT identified a different copyright owner than the author or a different license from the one the author offers?
[ Parent | on HN ]