Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: Old SIGNATURE detected. Please inform the module author to regenerate SIGNATURE using Module::Signature version 0.82 or newer. gpg: Signature made Sun 10 May 2009 08:13:58 AM JST gpg: using DSA key D6AB0CF4EF856CA4 gpg: Can't check signature: No public key ==> BAD/TAMPERED signature detected! <==

Add a META.json to the distribution. Your buildtool should be able to autogenerate it.

Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.

Add =head1 LICENSE and/or the proper text of the well-known license to the main module in your code.

List all modules used in the test suite in META.yml test_requires

Error:

• Module::Build
• version

This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.

List all modules used in the Makefile.PL/Build.PL in META.yml configure_requires

Error:

• Module::Build
• version

Add SECURITY(.pod|md). See Software::Security::Policy.

Add SECURITY(.pod|md) and add a contact address. See Software::Security::Policy.

Add CONTRIBUTING(.pod|md). See https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/setting-guidelines-for-repository-contributors.