Hacker News Reader

There is also a BSD-licensed version that we wrote in Go: https://github.com/flynn/go-tuf

But then you would have to ship and support a go compiler with base, which is a similar problem but easier to overcome.

Or ship compiled static binaries.

This would be more feasible, but we'd still need Go in the src tree so users can reproduce them.