News for hackers. Stuff that matters.

A comment on Crev: dependency vetting with a web of trust.

Re:Crev: dependency vetting with a web of trust by delinka on Friday January 04, 2019 @02:57PM (#18827135)
How do these reviews and signatures get published? I'd love the ability to search by this extra metadata.
[ Parent | on HN ]
Re:Crev: dependency vetting with a web of trust by mindB on Friday January 04, 2019 @03:25PM (#18827311)
They get published per reviewer as a git repository on e.g. github, which is fine since you're not really supposed to be putting any value whatsoever on joe-random's reviews.
[ Parent | on HN ]