> > BTW, did you get to check if the signatures are valid?
I did not. I also didn't check POMs, dependencies compliance, no binaries, and similar things. Just asking because it's my first time doing this. No worries. This will take a number of tries -- completely normal.