From 66b7e574fbdf512b4160939a975eb945563d3b2c Mon Sep 17 00:00:00 2001 From: Benjamin Loison Date: Wed, 1 Feb 2023 00:44:53 +0100 Subject: [PATCH] Precise the notion of repository state in `README.md` --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index f321a4a..33b2690 100644 --- a/README.md +++ b/README.md @@ -4,6 +4,8 @@ This repositories has two aims: - as [the web of trust](https://en.wikipedia.org/wiki/Web_of_trust), people trusting me can trust the repositories states that I verified - serve as a personal memo to keep track of personal verified states of repositories that *I use* and briefly comment as far as I know their legitimacy +Note that by repository state I mean the actual state of a repository at a given commit id, so marking a repository at a given commit as verified doesn't mean that previous commits were also verified. Only the resulting state at the given commit id was verified. + The current trust level is defined as looking legitimate, I don't guarantee that to the best of my knowledge there isn't any security vulnerability. Meta-informations related to a git, such as dependencies (not the legitimate aspect but the verified one), issues, pull requests..., aren't verified yet but may be in the future, if so it would be precised as such.