[Info-vax] Is GNV a VSI or external project ?

[Lawrence D'Oliveiro]

On Mon, 23 Dec 2024 16:01:45 -0500, Arne Vajhøj wrote:

> Note though that unless you have some advanced security mechanisms in
> place, then it may actually not be a bad policy. There has been a lot of
> malware attacks in recent years via reputable software repositories.

But the policy was to only get that software from “reputable” sources. So 
yes, since it doesn’t help much against such attacks, it is a bad policy.