Comment by still_grokking

Why such stuff isn't signed, like packages in every serious Linux distribution since decades?