| 31 Oct 2023 |
 atemu12 | In reply to @raitobezarius:matrix.org
Include repackaged ecosystems It does. | 13:30:33 |
 raitobezarius | In reply to @atemu12:matrix.org
It does. Yes yes, I clarified it does include repackaged ecosystems but not the "paths" | 13:30:46 |
| raitobezarius | I think it's fair to include repackaged ecosystems though | 13:30:54 |
| raitobezarius | AUR does have python3-XYZ | 13:30:59 |
| raitobezarius | For many XYZ | 13:31:01 |
| raitobezarius | Debian doesn't and… this means that people have to pursue them somewhere else | 13:31:14 |
 Foxboron | The repro count you are operating with uses "paths" which confuses people :) | 13:31:20 |
| raitobezarius | * Debian doesn't and… this means that people have to pursue them somewhere else (beyond basics) | 13:31:21 |
| raitobezarius | In reply to @foxboron:archlinux.org
The repro count you are operating with uses "paths" which confuses people :) Ah! The repro yes | 13:31:33 |
| raitobezarius | I thought we were talking about repology | 13:31:40 |
| Foxboron | Ah no, I don't care too much about repology stats :p | 13:32:02 |
| raitobezarius | :D | 13:32:22 |
| raitobezarius | I mean, either case, we probably need a way to map nixpkgs stuff to Arch/Debian/Guix so we can also do comparisons | 13:32:39 |
| Foxboron | It would be useful, I think | 13:33:13 |
| atemu12 | I think repology could come in handy there as it's also a map of packages between repos | 13:33:43 |
| atemu12 | * I think repology could come in handy there as it's also a map of package names between repos | 13:33:48 |
| atemu12 | You could plug in a list of Debian/Arch/Guix/whatever packages and theoretically get a list of pkgs attrs | 13:34:54 |
| atemu12 | Don't think that's easily accessible but the data is there | 13:35:09 |
| raitobezarius | Repology gives direct access to their PostgreSQL | 13:39:25 |
| raitobezarius | They're excellent at data availability | 13:39:34 |
| raitobezarius | * They're excellent at data accessibility | 13:39:39 |
 toonn | I wish their RSS feeds would work though : s | 13:42:53 |
 Rick (Mindavi) | I'd contribute hashes to a database if there was one and it was easy enough to setup. I build quite some stuff regularly | 14:47:12 |
|  @cifre:matrix.org left the room. | 17:18:46 |
|  @jgarte:matrix.org joined the room. | 18:12:20 |
| Foxboron | fwiw, I think hosting a transparency log for this wouldn't be a lot of work | 20:42:29 |
| Foxboron | The serverless logs (used by LVFS as an example) is not a own project; https://github.com/transparency-dev/serverless-log | 20:42:58 |
| 1 Nov 2023 |
 adisbladis | In reply to @raitobezarius:matrix.org
I think it is unreasonable to pursue Trustix without (a) funding (b) dedicated human resources on it Trustix still has NLNet funding, and there is o | 05:16:37 |
| adisbladis | In reply to @raitobezarius:matrix.org
I think it is unreasonable to pursue Trustix without (a) funding (b) dedicated human resources on it * Trustix still has NLNet funding, and there is earmarked funds to work on an official deployment to gather hashes and such | 05:17:08 |
| adisbladis | Regarding human resources, I haven't been able to work on it for some time for reasons I don't really want to discuss in a 100% public channel. I'm getting back into it. | 05:18:16 |
