There is also a TEST INSTANCE of the Package Downloads Server .
All trunk check-ins must be signed using OpenPGP.
All files present on the server must be signed using OpenPGP.
It is implemented as a customized instance of Fossil.
This project is sponsored by Eyrie Solutions.
More details to follow.