|
|
|
|
|
|
by vogu66
804 days ago
|
|
|
I mean, it doesn't need to be centralised on a single entity There was https://tea.xyz/ that does something like this, kind of, to a point, using a blockchain approach to see which packages are used. An extension of the same concept to gits would be interesting? |
|
|
You charge 20 bucks for month, and from this you pay 10 straight to OSS developers and with the other 10 you hire a team to offer a N1 level of support to your customers. You could also provide a repository of "vetted software" to prevent scenarios like the xz attack.