Erik G.

I think it's best if you actually create a new package, but you can obviously take a lot of the code from `selection` package. Yes, I also think most of...

You are right to assume it is unlikely, especially if the config directory is mounted into a docker container, which seems to be your primary usecase. If this was a...

It seems like you addressed the path traversal issue only in a single endpoint. Looking through `endpoints.py`, it seems that most API endpoints work rather similar an possibly share the...

I'm not really sure how source RPMs look internally and I always find it hard to find good documentation that is useful for implementers instead of users. Are they structured...

In this case, this should probably be a `goreleaser` feature rather than an `nfpm` feature my opinion, although I do see that there could be an argument for the opposite.

We should also print warnings to `stderr` when top level config options are not supported by the package format that is currently being built. If a configuration option is top...

In what way do these packages actually differ from `deb` packages?

This is tested in `TestRPM`, `TestDebEpoch` but not in for the `apk` packager. Honestly. the `apk` packager is missing a lot of tests to achieve testing parity with `deb` and...

So we'd need an epoch unit test for the `apk` packager and we should extend `core.complex.yaml` to include the epoch and test for it in the Dockerfiles.

That can both be done in a single PR.