Open
Description
ISSUE:
There are no MD5/SHA256 hashes published for the packages and since source code is not yet available users are unable to independently review, build and validate the integrity of the software.This added to the fact that the code is not digitally signed presents a potential problem for security conscious users.
SOLUTION:
Publish MD5/SHA256 hashes of the packages