Sign the dist as the last step before creating the archive. Take care not to modify/regenerate dist meta files or the manifest.

Error: WARNING: This key is not certified with a trusted signature! Primary key fingerprint: 6C48 8EC1 26A0 B208 4A70 E37A A235 7D46 97BF 07CB --- SIGNATURE Wed Jun 21 19:38:29 2023 +++ @@ -1,6 +1,6 @@ SHA256 e60395f564e62a62a87ff261ddaf11ccbea69c8ad87613b3f6fedfde3acd7480 Changes SHA256 74ebf9b47f1d6aa16ebf0624b2f21d88e031a484aaf242ff7ffc44f3c9dfd92e LICENSE -SHA256 6c73a96634a10847fbe88276725ca5e47f0422a05a3b0320a63c236108b00540 MANIFEST +SHA256 4e1a506f83e43d56d1fd32b7797a8691142d40accb95adc898d0bbd45cfc6b5a MANIFEST SHA256 99098ca60c9d788a8ee1bc7daca12e7c6b0b0b4839e27276ef1754a9601df74e META.yml SHA256 9a826658ab8e6701e7962397d008c19cffd0b7b30eda7c046de2158b401e3631 Makefile.PL SHA256 b9f805803aa02f0fd3b661a0c0470ae15773dd835c250cfbe7a9c76634da5846 README ==> MISMATCHED content between SIGNATURE and distribution files! <==

Add a META.json to the distribution. Your buildtool should be able to autogenerate it.

Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.

Add SECURITY(.pod|md). See Software::Security::Policy.

Add SECURITY(.pod|md) and add a contact address. See Software::Security::Policy.

Add CONTRIBUTING(.pod|md). See https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/setting-guidelines-for-repository-contributors.