Closed asgrim closed 4 days ago
The phar is signed with a key, but the public key is not published anywhere so can't actually be verified... Kinda defeats the point. Add to the docs too, on how to verify.
The phar is signed with a key, but the public key is not published anywhere so can't actually be verified... Kinda defeats the point. Add to the docs too, on how to verify.