[Axiom-developer] Re: pkg-src

[root]

>> Axiom is currently available as tarballs and binaries.
>> It is also available thru git, arch, cvs, and svn.
>> Master copies of releases are updated every other month on
>> sourceforge, savannah, github, and axiom-developer.org
>
>This scheme actually is problematic. We need tarballs or other
>reliable forms of distribution (like ZIP archives), so that we
>could have reliable cryptographic sums. VCS access is problematic.
>
>In WIP (http://pkgsrc-wip.sf.net/) there's support for VCS-based
>packages, but those are really unreliable. I maintain several of
>them, and have to admit it myself. To support you need to be able
>to reproduce bugs. With VCS-based package it is problematic.

Git maintains a cryptographic hash that gives exact information
about the source tree in use.

Tim