Show HN: A Maven plugin that automatically verifies PGP Signatures

Author here: I noticed that pretty much nobody checks PGP signatures. I'm hoping this plugin helps prevent hostile code injection in your environment. Cheers!