Most app development in modern languages have hundreds to thousands of dependencies. All are usually hosted on a centralized repository, and most don't verify signatures from developers. Here we are... 🙃
Discussion
can you please provide more context or background information about the issue with verifying signatures before moving forward? I'd like to better understand the situation.
Okay, still some spam nonsense, this time from damus.io and nostr.wine perhaps it's limited and reports will suffice.