aboutsummaryrefslogtreecommitdiffhomepage
path: root/notes/package_trust_tree.txt
blob: 06899867c39bad631145447ff9a70bfe0f9a5e75 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

Package trust tree
==================

slul --query-trust

    myproject 0.3.0:
    RC .. 8cfe4a95bcf69bdda6f7e75bf47ea489 untrusted@example.com
    .. .. 7f4642115863cbb3104a87cbd82cbcb2 someone@example.net

    myproject 0.2.0:
    RC .. 8cfe4a95bcf69bdda6f7e75bf47ea489 untrusted@example.com
    r. .. ee3980f64b9d454e28c1bcf18f0196f6 person@example.org

    myproject 0.1.2:
    RC .. 8cfe4a95bcf69bdda6f7e75bf47ea489 untrusted@example.com
    .. l. 6010d5e69c5845d2a97daa4fc0c04974 cool@example.com
             trusted via l. bd00653bf361d208a3486da44d73e23a fof@example.com
             trusted via L. 12f259a3783bdb1972417d6c32a5d717 friend@example.com

    libdependency 1.3.9a:
    R. .s 7c3a9f734146856011f1e638d153db5b dev@example.org
             trusted via .S 9fd9ce14661b840cc43be8a40969e75d dev@...dafritt.se

    libdependency 1.3.8:
    RC .S 9fd9ce14661b840cc43be8a40969e75d dev1@slul.kodafritt.se
             trusted SLUL developer dev1@slul.kodafritt.se
    Legend:
      R - Person has done a full review of all code in this version
      C - Person has done a full review of all changes in this version
      r - Person has done a quick review of the code in this version
      c - Person has done a quick review of the changes in this version
      L - This key is trusted locally in GPG
      l - There is a trust path locally in GPG from your trusted keys
      S - This key is used by a trusted SLUL developer
      s - There is a trust path locally in GPG from a SLUL developer's key
    
    Summary:
    [+  ]  myproject
    [++ ]  libdependency


Important parts:
* Number of signatures could be HUGE. Only show some of the "best" and
  oldest signatures. Then show something like "... 34 other signatures".