@paul_ipv6@infosec.exchange @Viss Am I the only one wondering why if you rely upon external repositories for critical systems that you are not self-hosting your self-hosted and offline-tested mirrors?

I mean, seriously!?‽ For all of the supply-chain attacks in the past decade, how can you justify not changing your habits?!‽