+Source: %{name}-%{version}.tar.gz

Please work with upstream URLs or source services - makes it clearer to users where things are coming from.

Especially when tarballs are non-releases, it's definitively better, as this tarball has no chance to be verified that you did not inject malicious code

Alexei Sorokin (XRevan86) - almost 7 years ago

author source maintainer

Should I use _service instead?

---

Dominique Leuenberger (dimstar) - almost 7 years ago

reviewer

If this is really a git checkout, then yes, I think that is best (it should be mode=disabled or localonly; whereas I detest localonly, as it's painful wanting to fix a typo and getting a new tarball on checkin)