> One naive solution would be to simply upload the public key to the repository as is done with PyPI. I don't belive you can upload public keys to PyPI. (In t

> One naive solution would be to simply upload the public key to the repository as is done with PyPI. I don't belive you can upload public keys to PyPI. (In the deep past you could put 32-bit(!) OpenPGP key ID in your PyPI profile, but that's it.)