Discussion: Please obey Debian's policy when adding repository

[ghost]

Debian had a policy for add third-party repositories,it can be found at Debian Wiki.
This repository has violated this policy in a number of ways,include:

• use not recommended command to add key(See apt-key(8))
• sources.list entry not have signed-by option set
• not use apt pinning.

I suggest that fix them to obey Debian's policies and provide better security for users.

[coslyk]

Thanks for your information. I am not sure if this repository obeys the policies because the script for adding repository is provided by the hosting service (Cloudsmith), which is their recommended way. See https://cloudsmith.io/~debianopt/repos/debianopt/setup/#formats-deb

You may contact Cloudsmith to submit the issues :)

[ghost]

Thanks for your reply.I have contact Cloudsmith to submit this issue,I think it's a wrong of Cloudsmith.