checker.apache.org is a new automated ASF dev tool to help projects
check for problems in their www.apache.org/dist/ files.
On 05/04/18 17:08, Andy Seaborne wrote:
To establish the proof chain for signed artifacts in /dist/project/, I
have been asked to try out the new META files.
There are two files
META says who signs what, and is itself signed by the PMC chair.
The signing chain for Jena now shows from route from the ASF key
(obtained over https) through the signed files in dist/jena:
and more details about the project are at:
and to browse the checker report on the dist files: