Additionally, the SOURCE_HASH field has been updated from SHA512,
which I presume defaults to WORKS_FOR_ME, to SHA1:UPSTREAM_HASH.
Do we consider sha1 to be sufficiently secure? I remember something about
sha512 or pgp signature being required by our guidelines.
Regards, Remko
Archive powered by MHonArc 2.6.24.