Daniel Mendler <[email protected]> writes: > If the code is downloaded as tarball, I strongly recommend to check it > against a sha256 hash. See for instance: > > https://github.com/minad/doom-on-emacs/blob/9d5929335c4080699a2daa153ace2996c905008a/Makefile#L17 > > This way you would get similar guarantees.
That would correspond to setting `package-check-signature' to t in the patch. -- Ihor Radchenko // yantar92, Org mode maintainer, Learn more about Org mode at <https://orgmode.org/>. Support Org development at <https://liberapay.com/org-mode>, or support my work at <https://liberapay.com/yantar92>
