|
|
|
|
|
|
by FRidh
2135 days ago
|
|
|
Thanks! I was only aware of Nimble. I'll have a look at it. One thing I noticed right away that it seems to be lacking (judging from the `nimph.json` assuming that is the lock file) are checksums over the data or hashes of revisions the references correspond to. References such as tags are mutable, and thus hashes are needed to validate them. See e.g. the discussion over at https://github.com/NixOS/nix/pull/3216. |
|
|