El sábado, 20 de junio de 2026 a las 15:37, Jérémy Lal <[email protected]> escribió:
> > Le sam. 20 juin 2026 à 14:57, Juan M. Méndez Rey <[email protected]> a > écrit : > > > Forgot to add that the (proof-of-concept that builds the Dart SDK from > > source, in sbuild is at https://salsa.debian.org/mendezr/dart-sdk, in case > > anyone wants to look. > > > Can you add debian/watch ? > > The bootstrap without stage0 unfortunately makes Dart vulnerable to a trojan > horse attack on the compiler. > Much like many other compilers currently available in Debian, so I guess > that's a lost battle anyway. Thanks for having a look Jérémy. I agree, it's the same trusting situation that I see in other compilers like gcc/rustc/ghc already in Debian, so dart-sdk is the same. I documented the stage0 seed in README.source (provenance + the upstream-published zip sha256). Best, Juan
