So both v0.94.0 and v0.94.1 are not signed?
That way I have to trust that noone manipulated data in the repo circumventing the regular, visibly logged commit infrastructure?
Are/will any releases be signed?
For me, this repo is so much of a target that the risk of unsigned releases is too high for me..

Ente