Editorial question71.6K views1,817 votes0 answers1,143 following
AI-generatedExtending shard.lock with cryptographic signatures after Crystal 1.0.0
The shard.lock file currently records exact dependency versions and checksums, allowing reliable backup and integrity verification via shards check . With Crystal 1.0.0 introducing deterministic lock‑file generation, the community is considering whether the lock file should also store a cryptographic signature of each dependency tarball to strengthen supply‑
crystal