Highlighting this because it still confounds me that projects like this receive no support. I'd be unsurprised if this wasn't the only project in a parlous stat

Highlighting this because it still confounds me that projects like this receive no support. I'd be unsurprised if this wasn't the only project in a parlous state. What is all the more baffling is the lack of support from the FSF, EFF, etc. It also baffles me that the Core Infrastructure Initiative isn't involved in GPG (to my knowledge) considering we have more or less no other way of signing software releases that is commonly used. Projects like this need more love than they get. How can the community - rather than wealthy beneficiaries - ensure this sort of thing gets enough funding? Open question, because I don't know.