:closed_lock_with_key: :package: composer plugin to enforce GPG signatures on downloaded GIT composer packages - View it on GitHub