Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: WARNING: This key is not certified with a trusted signature! Primary key fingerprint: 6C48 8EC1 26A0 B208 4A70 E37A A235 7D46 97BF 07CB --- SIGNATURE Sun Jun 11 01:59:19 2023 +++ @@ -1,7 +1,7 @@ SHA256 714d675f54c5eb2fc4d8e88ef9ee1c65e9d66af0eec32b2795420af9dfb132a5 CONCEPT SHA256 bc4b917e8681a5617944bf26843b36ad00c980fe917a54287301c4fba47fa0b6 Changes SHA256 e9ae42c89b2f406c60c950a2a41695eabc2d324c0a9cd90d165e87c4e8a731bd LICENSE -SHA256 a0ea938913bbf58e96d6ee3f1465fca93772eccb368c4017b53117d6c44a6477 MANIFEST +SHA256 bbc05bf1a3292d2e137231f28fde235d2b1a0739d65d061cdb9402cd7439cee9 MANIFEST SHA256 dff6fd9a8b49ed5d195485d280c6b6cd97c9e8ce61eff6a0e75a6b38cf327221 META.yml SHA256 40f15e913015f62e774e8eba8a0cfe99976552af1511bdc44b2bbf98123766ed Makefile.PL SHA256 f527af4ceee3ff37c34a3a05d1cf74ac1b390ed489870ac09d3c3e88778bd90f README ==> MISMATCHED content between SIGNATURE and distribution files! <==

Add a META.json to the distribution. Your buildtool should be able to autogenerate it.

Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.

Add SECURITY(.pod|md). See Software::Security::Policy.

Add SECURITY(.pod|md) and add a contact address. See Software::Security::Policy.

Add CONTRIBUTING(.pod|md). See https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/setting-guidelines-for-repository-contributors.