signet-org/signet-python
View on GitHub ↗ ★ 23 Python
A decentralized code signing network
3 mentions on Hacker News by 1 person: 0 stories, 3 comments · first 2016-03-23 · latest 2016-03-26
20082026
-
I've been tinkering on one approach to trustworthy OSS ecosystem at https://github.com/chromakode/signet . The OSS world has grown precipitously in the era of GitHub/npm/etc, and the trust model hasn't caught up. It's not tenable to…
comment by chromakode · 2016-03-26 · in Vulnerability #319816 – npm fails to restrict the actions of malicious packages -
Yes! I've been working on this scheme at https://github.com/chromakode/signet
comment by chromakode · 2016-03-24 · in Micropackages and Open Source Trust Scaling -
…we could even use existing centralized repositories. I've been tinkering on an approach to this at https://github.com/chromakode/signet as a proof of concept.
comment by chromakode · 2016-03-23 · in Package managers should be immutable, distributed and decentralized