https://electrum.org/#download provides GPG signatures for the releases, it would be nice if the ebuild checked them.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=20e7f5a3ebf10b5564538bc1babb3ddb00f0f4d8 commit 20e7f5a3ebf10b5564538bc1babb3ddb00f0f4d8 Author: Michał Górny <mgorny@gentoo.org> AuthorDate: 2025-01-01 06:42:28 +0000 Commit: Michał Górny <mgorny@gentoo.org> CommitDate: 2025-01-01 07:05:54 +0000 net-misc/electrum: Use signed release tarballs Closes: https://bugs.gentoo.org/947176 Signed-off-by: Michał Górny <mgorny@gentoo.org> net-misc/electrum/Manifest | 2 + net-misc/electrum/electrum-4.5.8-r2.ebuild | 129 +++++++++++++++++++++++++++++ 2 files changed, 131 insertions(+)