swesterfeld/liquidsfz

Tags are missing

dvzrv opened this issue · 1 comments

dvzrv commented

Hi! I would like to be able to package liquidsfz for Arch Linux. To fend off supply chain attacks and be able to reproducibly build liquidsfz, it would be required to tag commits of this repository accordingly, instead of only having a downloadable source tarball, that could contain anything and is not directly linkable to a commit in this repository.

Thanks!

Right. I've now pushed the 0.1.0 tag from my private repo. You should be able to build from the tag. Still for end users I'd recommend the tarball I provided, as it contains the make dist step (./configure instead of ./autogen.sh).