The author of package in the repository is different than original developer
I am a novice ubuntu user. I know that the software can be installed in several ways:
- directly from author's website (e.g. deb package)
- From the Repository
Looking for the Visual Studio Code Editor I found this package in the repository. However the developer of this package is snapcrafters (not Microsoft).
How can I be sure that this package has not been modified by this developer and its source is the same as package download directly from Microsoft's website?
repository
asked Feb 10 at 20:38
rafr3rafr3
1011
add a comment |
I am a novice ubuntu user. I know that the software can be installed in several ways:
- directly from author's website (e.g. deb package)
- From the Repository
Looking for the Visual Studio Code Editor I found this package in the repository. However the developer of this package is snapcrafters (not Microsoft).
How can I be sure that this package has not been modified by this developer and its source is the same as package download directly from Microsoft's website?
repository
asked Feb 10 at 20:38
rafr3rafr3
1011
1
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15
add a comment |
I am a novice ubuntu user. I know that the software can be installed in several ways:
- directly from author's website (e.g. deb package)
- From the Repository
Looking for the Visual Studio Code Editor I found this package in the repository. However the developer of this package is snapcrafters (not Microsoft).
How can I be sure that this package has not been modified by this developer and its source is the same as package download directly from Microsoft's website?
repository
asked Feb 10 at 20:38
rafr3rafr3
1011
I am a novice ubuntu user. I know that the software can be installed in several ways:
- directly from author's website (e.g. deb package)
- From the Repository
Looking for the Visual Studio Code Editor I found this package in the repository. However the developer of this package is snapcrafters (not Microsoft).
How can I be sure that this package has not been modified by this developer and its source is the same as package download directly from Microsoft's website?
repository
repository
asked Feb 10 at 20:38
rafr3rafr3
1011
asked Feb 10 at 20:38
rafr3rafr3
1011
asked Feb 10 at 20:38
rafr3rafr3
1011
asked Feb 10 at 20:38
rafr3rafr3
1011
asked Feb 10 at 20:38
rafr3rafr3
1011
1011
1
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15
add a comment |
1
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15
1
1
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1117210%2fthe-author-of-package-in-the-repository-is-different-than-original-developer%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1117210%2fthe-author-of-package-in-the-repository-is-different-than-original-developer%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
There is no Ubuntu requirement that a packager must be the upstream developer. The only requirement is that the software's license is adhered to. Many upstream projects rely upon unaffiliated volunteer packagers to deb or snap or flatpack or appimage their software. Deb repositories are designed so that the distro is (mostly) responsible for software quality, and users can trust the distro. Snaps are designed for the distro be a mere distributor, and the user (and packager) to carry greater responsibility for developing trust.
– user535733
Feb 10 at 23:15