That’s actually not a problem for public repositories such as nixpkgs. The content itself is authenticated by the keys owning the repository.
That’s actually not a problem for public repositories such as nixpkgs. The content itself is authenticated by the keys owning the repository.