Get the latest tech news
The Fundamental Law of Software Dependencies
Canonical source code for software should include checksums of the content of all its dependencies.
The law says that something should hold the hash ofthe entire source, and thus mandates the use of a content-addressed version control system such asgit. You could take a shadyblob of bytes you’ve found laying on the street, as long as its checksum checks out. Compilerdistribution should include a manifest – a small text file which lists all platform and theirplatform specific hashes.
Or read this on Hacker News