Hacker GitHub

← All repos

s4u/pgpverify-maven-plugin

View on GitHub ↗ ★ 54 Java

Verify Open PGP / GPG signatures plugin

3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2017-08-02 · latest 2026-06-01

Mentions per year 3 mentions · busiest year 2017 (1)
20082026
  1. https://github.com/s4u/pgpverify-maven-plugin If you want paranoid mode, you can verify literally every part of the maven build process.
  2. …[2] http://central.sonatype.org/pages/working-with-pgp-signature... [3] https://github.com/s4u/pgpverify-maven-plugin
  3. Yes https://github.com/s4u/pgpverify-maven-plugin There's also this, https://jeremylong.github.io/DependencyCheck/dependency-chec... Because you want to know when a dependency has a vulnerability, even when the developers are legit.
    comment by danjoc · 2017-08-02 · in Malicious crossenv package on npm