Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

For a long time, there was one legitimately annoying disadvantage to the git-generated tarballs though - they lost tagging information. However, since git 2.32 (released June 2021; presumably available on GitHub by August 2021 when they blogged about it) you can use `$Format:%(describe)$` ... limited to once per repository for performance reasons.


Except this change was made in 2023, it is just scary how good this threat actor was.


I believe they also do not include sub modules, which is a big disadvantage for some projects


Yes. Also, GitHub recently made some upgrades that forced checksum changes on the autogenerated archives: https://github.blog/changelog/2023-01-30-git-archive-checksu...




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: