dub bad, aur hack edition

[Mindy (0xEAB)]

On Sunday, 14 June 2026 at 11:36:38 UTC, Guillaume Piolat wrote:
> Before dub is hacked we should take a step towards signing 
> packages somehow?

Maybe one could use git submodules instead.

They already use hashes — usually SHA-1, tho, but I suppose it’s 
good enough.
Truth to be told, just press that fork button and link your own 
fork as the origin for the submodule.

Also, there’s the subtrees feature of git.