4 ms·

Does Maven Central also require machine-checkable proofs of security?

• lmm 7y ago
  No (and I don't think any code repository does or could; what would a "proof of security" actually prove?). It does require machine-checkable signing of all releases.