A signed list of hashes for projects that do not distribute securely. - View it on GitHub