Re: GNU ELPA security and Org-mode

[Stefan Monnier <monnier@IRO.UMontreal.CA>]

>> Well, if the "list of tarballs" (at https://orgmode.org/elpa) could be
>> kept in a Git branch instead, that would be great.
> Not sure what you mean exactly by keeping the list of tarballs in a
> Git branch.

Just that instead of having a bunch of tarballs in a directory (where
each tarball corresponds to a particular tree of files), I'd much rather
have a Git branch (where each revision holds a corresponding tree of
files).

> In which Git repository?

Doesn't matter which (tho, ideally, it should be elpa.git, and the
branch should be named "externals/org").


        Stefan