@drewdevault I don't think so. While it is certainly useful, signing the tarballs doesn't help. Since the perpetrator had a position of trust, this would still have happened.