[issue]: Remove BLOBs from the source tree · Issue #2795 · ventoy/Ventoy
github.com
What happened? Due to the recent XZ-Utils drama I checked the code and I'm appalled. There are more BLOBS than source code. https://github.com/ventoy/Ventoy/tree/3f65f0ef03e4aebcd14f233ca808a4f8946...

I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

  • refalo@programming.dev
    0·
    2 months ago

    That is true, but also nobody is doing it. Just like nobody is verifying Signal’s “reproducible builds”.

    • Pup Biru@aussie.zoneEnglish
      0·
      2 months ago

      are you sure?

      there could be thousands just waiting for a failure to come out and say “HEY THIS IS DODGY”