Hi, The Git community considers using submodules for some parts of the code (a third party lib, SHA1DC, computing SHA1s that warn about potential attachs, see shattered.io) [1]. We are also concerned about single point of failure there, so a repo at kernel.org mirroring the potential submodule[2] would be great. I cc'd the git mailing list as we may want to have further discussion who shall have access to the new repo. Thanks, Stefan [1] https://public-inbox.org/git/20170520115429.12289-1-avarab@xxxxxxxxx/ [2] https://github.com/cr-marcstevens/sha1collisiondetection