Re: OSTIF Boost security audit report

From: Marshall Clow (mclow.lists_at_[hidden])
Date: 2024-05-23 23:07:15

On May 23, 2024, at 3:50 PM, Andrey Semashev via Boost <boost_at_[hidden]> wrote:
> 
> Also, release tarballs on GitHub don't have hashsums or signatures attached.
> 
> https://github.com/boostorg/boost/issues/838

As I wrote in that issue:
        The archives on GitHub are not official releases.

Please stop pretending/telling people that they are.

If I could remove them entirely, I would do so.
But they appear to be an artifact of the tagging process.

— Marshall