Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: Old SIGNATURE detected. Please inform the module author to regenerate SIGNATURE using Module::Signature version 0.82 or newer. gpg: Signature made Wed 09 Apr 2008 05:00:23 AM JST gpg: using DSA key 395F66B765720151 gpg: Can't check signature: No public key --- SIGNATURE Wed Apr 9 05:00:23 2008 +++ @@ -13,7 +13,7 @@ SHA1 8615ab99ef453a8cbf036c741db14f7ce258aa06 t/element.t SHA1 0e141eecf3ca4903ef38d9413b5403a9ddb0392f t/pod_cvg.t SHA1 74a957cd8b93f25672ecc6aa578a671d084dd343 t/pod_syn.t -SHA1 0b2a67ca07b286b362411ab3a3e0aa666105919b t/read.data +SHA1 40a8bfde95fe8f262ef6ba2eb229f9f6c1a7ae3f t/read.data SHA1 02a79717c292a4c9175bf3c4dfe96a72167573a9 t/read.t SHA1 eb405288dcbb28d251f574529a90b3f741c018aa t/read_pp.t SHA1 92cdb5d5f234828d3c33f0ac73db3c6677228975 t/setup_pp.pl ==> MISMATCHED content between SIGNATURE and distribution files! <==

Add a META.json to the distribution. Your buildtool should be able to autogenerate it.

Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).

This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.