semisol on Nostr: Every package manager under the sun already does signature verification.Every package manager under the sun already does signature verification.