Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Artifacts in the central repository are also signed, it's a requirement:

https://docs.sonatype.org/display/Repository/Sonatype+OSS+Ma...

Checking the actual signatures is another story ;).



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: