Centralised versioning systems are inherently authoritative, but when dealing with decentralised systems, either patches are made and applied to the maintainer’s repository, or one repository should be defined as the authoritative one.
If the authoritative repository requires commit access, it should be locked down as much as possible, requiring authentication, encryption, and push access without opening [...]
Webtatic.com
Just another technical blog