I feel like this discussion is still going a bit in circles, but it triggered a different-but-possibly-related-thought on how we might be able to drive meaningful progress on this topic. I don’t recall seeing this idea (of “virtual indexes”) discussed before, but I’m also not deeply involved in the packaging ecosystem…my participation is much more as a consumer that cares greatly about software supply chain security. And please forgive me if I’ve just re-proposed an idea that’s been previously rejected - I didn’t intend to resurrect old debates.
1 Like