Vendors like Sonatype already offer this for enterprises. I feel we're a long way from it being available in core OSS repositories though. https://help.sonatyp

Vendors like Sonatype already offer this for enterprises. I feel we're a long way from it being available in core OSS repositories though. https://help.sonatype.com/fw/best-practices/release-integrity-best-practices https://help.sonatype.com/fw/best-practices/release-integrit...