Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: gpg: Signature made Tue 12 Nov 2024 01:10:24 AM JST gpg: using DSA key 8841C1C91C9320CF3CD739F5637D9252D7715B49 gpg: issuer "gws@cpan.org" gpg: requesting key 637D9252D7715B49 from hkp server keyserver.ubuntu.com gpg: Can't check signature: No public key ==> BAD/TAMPERED signature detected! <==

Add a 'repository' resource to the META.yml via 'meta_add' accessor (for Module::Build) or META_ADD parameter (for ExtUtils::MakeMaker).

This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.