Hello, we've got new section in Packaging Guidelines about verifying upstream sources[0] with GPG. Please use it whenever possible :) Thanks! [0] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_source_file_verification _______________________________________________ packaging mailing list -- packaging@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to packaging-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/packaging@xxxxxxxxxxxxxxxxxxxxxxx