> The original author moved to gitlab and started GPG signing commits with his real GPG key.

Signed commits from them go back at least 1 year. So its not "started", but rather "continued" signing.