If only they weren’t flatpaks. Ask a release engineer about importance of artifact validation and single source of truth if you don’t know why that’s a risk.
Im not in this field, but the risk is that flatpak can be distributed by anyone?
But flathub provides validated Tag for entities provoding trustworthy flatpaks, no?
If only they weren’t flatpaks. Ask a release engineer about importance of artifact validation and single source of truth if you don’t know why that’s a risk.
Im not in this field, but the risk is that flatpak can be distributed by anyone? But flathub provides validated Tag for entities provoding trustworthy flatpaks, no?