Is the apt-get install version of git-crypt official?

[tolmasky]

I don't see any mention of using apt-get to install git-crypt in the README, but it appears to be available on apt-get. Just want to know whether this is an official distribution channel provided by this project or if it should be avoided.

[AGWA]

git-crypt author here. I maintain the Debian/Ubuntu git-crypt package, so yes it is "official" and OK to use, but note:

1. In general you should not prefer distro packages over upstream builds. For example, the Alpine package for git-crypt is not maintained by this project and contains unofficial patches that introduce security vulnerabilities and break compatibility with other versions of git-crypt. Only the Debian/Ubuntu package is sanctioned.
2. Even though the Debian/Ubuntu package is sanctioned by this project, it will almost always be an older version of git-crypt, because it is a long process to go from releasing a new version of git-crypt to having it included in a stable release of Debian/Ubuntu. So you may still want to consider using upstream builds.