Re: GNU ELPA security and Org-mode

[Bastien]

Hi Stefan,

Stefan Monnier <address@hidden> writes:

> Doesn't matter which (tho, ideally, it should be elpa.git, and the
> branch should be named "externals/org").

To summarise:

- I create a branch on elpa.git called "externals/org".

- I create the "elpa/packages/org" directory in this branch.

- I copy the content of an Org ELPA archive (eg org-20180430.tar)
  into this directory, with org-{version|pkg|loaddefs}.el files.

- I commit and publish this "externals/org" branch on the public
  elpa.git repository.

Is that so?

-- 
 Bastien