Re: What is GNU ELPA?

[Stefan Monnier]

> aware that installing a package can run arbitrary code, so only add
> sources that you trust.
>
> ...apparently implying that the user can trust GNU ELPA.

Strictly speaking it only implies you can trust it to be safe to
*install* a GNU ELPA package, but not necessarily to run it.

I had no recollection of this text, but indeed, I try to keep on eye on
GNU ELPA to make sure *installation* is harmless (not only in terms of
safety but also annoyance).  I wouldn't guarantee it is harmless, but
that's the part that I do try and make an effort to check.


        Stefan