On Thu, Dec 28, 2017 at 5:41 AM, peter green wrote:
> Unfortunately there doesn't seem to be a good way to securely retrive a dsc
> from snapshot.debian.org given a package name and version number.
At this time there isn't any good way to do that securely, until
#763419 gets implemented.
Your options are:
You can use debsnap, which is easy but not secure.
$ debsnap srcpkg version
Debian members can login to lw08.debian.org, that has NFS access to
the snapshot archive and guest access to the snapshot meta-data
database. That is probably the most secure you can get right now.
There are some Python functions for interacting with the DB here:
vcs-pkg-discuss mailing list