perl-Module-Signature

Module::Signature adds cryptographic authentications to CPAN
distributions, via the special SIGNATURE file.
If you are a module user, all you have to do is to remember to run
'cpansign -v' (or just 'cpansign') before issuing 'perl Makefile.PL' or
'perl Build.PL'; that will ensure the distribution has not been tampered
with.
Module authors can easily add the SIGNATURE file to the distribution
tarball; see NOTES below for how to do it as part of 'make dist'.
If you really want to sign a distribution manually, simply add
'SIGNATURE' to MANIFEST, then type 'cpansign -s' immediately before 'make
dist'. Be sure to delete the SIGNATURE file afterwards.
Please also see NOTES about MANIFEST.SKIP issues, especially if you are
using Module::Build or writing your own MANIFEST.SKIP.
Signatures made with Module::Signature prior to version 0.82 used the SHA1
algorithm by default. SHA1 is now considered broken, and therefore module
authors are strongly encouraged to regenerate their SIGNATURE files.
Users verifying old SHA1 signature files will receive a warning.

          

---

License: CC0-1.0 AND (GPL-1.0-or-later OR Artistic-1.0)
URL: https://metacpan.org/release/Module-Signature