New comment by sgn on void-packages repository https://github.com/void-linux/void-packages/pull/23472#issuecomment-657156200 Comment: On 2020-07-11 12:35:38-0700, Piotr wrote: > Ok, verifying checksum of file from gh against checksum of file from > gh is a weak link. Do it need rebuild with upstream signed sources? Both tarballs has the same content, now. I don't think we need to rebuild -- Danh