ghc-hackage-security

The hackage security library provides both server and client utilities for securing the Hackage package server (<https://hackage.haskell.org/>). It is based on The Update Framework (<https://theupdateframework.com/>), a set of recommendations developed by security researchers at various universities in the US as well as developers on the Tor project (<https://www.torproject.org/>). The current implementation supports only index signing, thereby enabling untrusted mirrors. It does not yet provide facilities for author package signing.

Releases Overview