Code signing certificate

[pdaengeli]

Installing/updating the framework prompts a warning that needs to be accepted. This is quite common and also the case for the TEI add-on, Ediarum and others.

example

We could look into

• getting a sigstore CSC
  • https://docs.sigstore.dev/certificate_authority
• deploying the framework as signed .jar

Likely not worth the effort unless we want to learn more about it.