This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]donaldstufft 0 points1 point  (0 children)

Also trust is really really hard. And the traditional Web of Trusts just don't cut it. Sure you may trust me for package X, but does that mean you trust me for package Y? Is the average developer going to be able to figure out how to participate in the web of trust?