Daniel Cazzulino

Would be nice to be able to pass those custom flags when using the CLI too. Right now, there doesn't seem to be a way to do so?

Hm, the build metadata is there because it's semver2.0 standard, and it helps quickly go back to the actual build and hash that generated a given package. Is this still...

Got a potential fix in #1176 🙏

Haven't thought much on that. Could be an adapter layer on top of the underlying websocket client, but I'm not sure how you'd set up a brand new websocket if...

This one is quite tricky since mono.options [does the wrapping itself](https://github.com/mono/mono/blob/master/mcs/class/Mono.Options/Mono.Options/Options.cs#L1255-L1256) and it [doesn't look customizable](https://github.com/mono/mono/blob/master/mcs/class/Mono.Options/Mono.Options/Options.cs#L1255-L1256) at all :/

> Contrarily, however, I think it is unacceptable to simply start egressing information out of closed systems that should be secure; this should always be a conscious choice/decision or explicit...

That's why I'm giving ample time and opportunity to provide feedback.

> There are software solutions addressing this already. Including open source solutions. Sure. There's solutions to pretty much everything under the sun, I know. The goal is not 100% infallibility,...

Thanks @hilari0n, many of your comments are addressed in the latest spec and reference GH implementation spec. Yes, unsigned manifests was a dumb idea. A central one for all sponsorables...

Thanks @jaredpar for the constructive feedback. SponsorLink never runs on CI nor CLI builds, so I guess an Info diagnostic (for now?) is the best course of action 👍