Jeremy C. Reed [Wed, Oct 08, 2003 at 04:10:22PM -0700]:
> Sometimes I think it would be useful to know what machine and what the
> build date was for a package.
> 
> What do you think about have +BUILD_INFO include a BUILDER field with
> user@hostname:/path/to/pkgsrc and a BUILD_DATE field with the time and
> date of .install_done ??

It's no use. When I build package from pkgsrc, I know it was build by me. If
I download package from netbsd.org, I know it was build by NetBSD
developers. It is really easy to fake such information. 

However, packages could be somehow signed (PGP? GnuPG?), so you could know
then, who *really* built them.

-- 
Michal Pasternak :: http://pasternak.w.lub.pl