Subject: Re: gnu: Add mm-common.

From: "Raghav Gururajan" <[email-masked]>
Date: Sun, 22 Mar 2020 01:16:22 +0000

Hi Danny!

> It is very dangerous to use wget for stuff like that. For example the usual cryptographic signature
> check is skipped--which means that anyone could replace it by a bad version and nobody would
> notice.

Ah yes, you are right.

> I would advise to instead add it as "origin" in "native-inputs" and copy it manually.
> That way its sha256 sum will be checked.

That's a good idea. Could you help with a generic syntax for adding origin inside inputs?

Thank you!

Regards,
RG.