On Sunday, 14 June 2026 at 05:54:17 UTC, Kapendev wrote: > > But, but... I can see how this can be a problem for DUB too. > AUR and NPM are not special or anything. Before dub is hacked we should take a step towards signing packages somehow?