Yes, but at this point in time, I can't trust most of the free software that I use due to the fact that a) most developers don't sign their code b) centralized source code hosting providers have been known to remove or censor repositories c) most of us don't have time to do a full audit in these cases. This is a critical issue that is not being addressed and it has existed for a long time. The luxury features that Github and others have are not worth the censorship or the fact that these large hosts could manipulate these repositories in various ways. If a project can't afford to host their source code repositories, then they need to speak up and ask for donations or start going to the larger players in the free software community. We could also try to create or advocate for a set of tools that lets volunteers host repositories in a decentralized way (like gittorrent) and get developers to sign their source code.

Reply via email to