conda-forge / xz-feedstock

A conda-smithy repository for xz.
BSD 3-Clause "New" or "Revised" License
0 stars 22 forks source link

archive this feedstock to prevent updates to hacked xz versions? #41

Open beckermr opened 5 months ago

beckermr commented 5 months ago

Due to the recent xz backdoor discovery (), we need to prevent updates on this feedstock. The current latest version appears unaffected.

Our best choice is to simply archive this feedstock for the time being.

Our next best choice is remove any non-core devs from the feedstock and make sure everyone knows not to update.

thoughts @conda-forge/core?