On: FAQ on the xz-utils backdoor

[cassianoleal]

Thanks, that makes sense.

I think in my mind the whole chain was still

    source code->compile->test->distribute

from a single repo which is obviously not the case.

It’s more like

    source->package->test->ship to distros->compile->test->package->distribute