Hacker News new | ask | show | jobs
by embedding-shape 193 days ago
Any developers worth their salt has build scripts turned off everywhere at this point, and manually build the packages they need it for, or manually whitelisted. It may save time, but as others mentioned, shipping binary blobs in a opaque way is a great way of making people avoid your project.
1 comments

Just have a seamless process between author and user for signing and verifying builds.
Agree, would be nice. Feasible options available today?