<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On 3 April 2017 at 09:30, Jussi Kukkonen <span dir="ltr">&lt;<a href="mailto:jussi.kukkonen@intel.com" target="_blank">jussi.kukkonen@intel.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex"><div>This is true, there&#39;s not that much in the repo itself to create trust. The major show of trust is here though: <a href="http://pkgs.fedoraproject.org/cgit/rpms/logrotate.git/commit/?id=9cb55142e51b82085d6c3136448c1f441454e351" target="_blank">http://pkgs.fedoraproject.org/<wbr>cgit/rpms/logrotate.git/<wbr>commit/?id=<wbr>9cb55142e51b82085d6c3136448c1f<wbr>441454e351</a></div><div>Fedora/Red Hat themselves changed to use this repo when the fedorahosted repos were EOL&#39;d (see also Red Hat folks working on the github issues in January).</div><div></div></blockquote></div><br>So logrotate was originally hosted on Fedora infrastructure that is then shut down, a github repository appears and Fedora fetch from that github repository.  Also the commit in the github repository to change the README from fedorahosted to github (<a href="https://github.com/logrotate/logrotate/commit/09c4fa8bc6cf2c01bad24d33c3ea69371030c014">https://github.com/logrotate/logrotate/commit/09c4fa8bc6cf2c01bad24d33c3ea69371030c014</a>) was committed by a Red Hat employee (<a href="https://github.com/kdudka">https://github.com/kdudka</a>).</div><div class="gmail_extra"><br></div><div class="gmail_extra">Whilst there are many official-looking forks on github that are just Some Guy, this is clearly the new canonical home.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Ross</div></div>