mtjm wrote:

Should be easy to do, without waiting for reports of users installing the packages. Some of these packages might be old and obsolete, maybe we should remove them instead.

I resigned with coadde and Jorginho to [libre] and [libre-testing] repo, and those repos are working correctly. [social] and others repo are necessary to recheck, because i found some packages with that problem.

I think we most need a script to automatically do these checks e.g. for mips64el repos. There was still a bug in a script recently that removed signatures from arch=any packages and there might be other bugs.

db-list-unsigned-packages in dbscripts solves this.