logoalt Hacker News

nevon • today at 10:08 AM • 1 reply • view on HN

To prevent impersonation and having people download potential malware from repositories posing as the official xscreensaver distribution channel.


Replies

graemep • today at 12:21 PM

I am pretty sure the distro packagers all know where to get the real code from, and its packaged for everything that runs X so minimal risk.

Also assuming something on github is the official repo is dangerous anyway. There might be multiple repos with the same name, there might be a more actively developed fork and the official one might be unmaintained, etc.