s4u/pgpverify-maven-plugin
View on GitHub ↗ ★ 54 Java
Verify Open PGP / GPG signatures plugin
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2017-08-02 · latest 2026-06-01
20082026
-
https://github.com/s4u/pgpverify-maven-plugin If you want paranoid mode, you can verify literally every part of the maven build process.
comment by exabrial · 2026-06-01 · in Malicious npm packages detected across Red Hat Cloud Services -
…[2] http://central.sonatype.org/pages/working-with-pgp-signature... [3] https://github.com/s4u/pgpverify-maven-plugin
comment by symtos · 2018-04-23 · in The Node.js Ecosystem Is Chaotic and Insecure -
Yes https://github.com/s4u/pgpverify-maven-plugin There's also this, https://jeremylong.github.io/DependencyCheck/dependency-chec... Because you want to know when a dependency has a vulnerability, even when the developers are legit.
comment by danjoc · 2017-08-02 · in Malicious crossenv package on npm