It’s a merged pull request made by a member. Dunno which release it’d be in. This means people can double-click deb files to install again (with a warning).
c.f. https://news.itsfoss.com/ubuntu-24-04-disappointment/
It’s a merged pull request made by a member. Dunno which release it’d be in. This means people can double-click deb files to install again (with a warning).
c.f. https://news.itsfoss.com/ubuntu-24-04-disappointment/
What if the deb is from a GitHub repository that matches the MD5 hash?
If the hash and the binary come from the same download location, how does this improve anything?
Also always nice is when there is a PGP signature but the key cannot be found anywhere.
It’s not just about the verification/reproducibility, these random ass .deb files sometimes don’t have proper dependency information and/or repository support. So it may work for now and might stop working on the future when some library upgrades on your system. Or even worse, they may fucking block system library upgrades leaving you insecure at worst and out of support at best.