From hannes at mehnert.org Thu Feb 16 23:42:45 2017 From: hannes at mehnert.org (Hannes Mehnert) Date: Thu, 16 Feb 2017 23:42:45 +0000 Subject: [opam-devel] opam repository signing Message-ID: <87bc18bc-8714-feb9-d4ff-8fa2f89fed8e@mehnert.org> I finally released conex [1], to be used for signing package release, and verification of repositories. Earlier I analysed all PRs to the opam repository within the last 4.5 years and found actual maintainers of packages [2]. A getting started guide is available at https://hannes.nqsb.io/Posts/Conex - we need to decide on team members (all teams are empty right now), especially janitors. Feedback is appreciated, as usual, hannes 1: https://github.com/ocaml/opam-repository/pull/8493 , API doc at https://hannesm.github.io/conex/doc/ 2: https://github.com/ocaml/opam-repository/pull/8494 , see https://hannes.nqsb.io/Posts/Maintainers for details PS: my key fingerprint is ht9ztjjDwWwD/id6LSVi7nKqVyCHQuQu9ORpr8Zo2aY= (in case someone wants to verify and approves of my OpenPGP signature and key) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: