Security Feature Request: Checksums. + Prevent overwrite of exported package lists.

Greetings!

It would be nice to have a checksum file available to verify the integrity of downloads. This file would contain SHA256 or other checksums of released packages. In addition, you could GPG sign the checksums but that could be considered excessive. Suggested as many security related packages do this.

Second, when exporting package lists UAD writes to a single file. This file is overwritten when I export a package list from "recommended" followed by one from "advanced" or another category. It would be nice if the app produced a separate exported package list whenever the user chooses to click "export".
E.g. UAD_exported_packages_1.txt, UAD_2.txt, UAD_3.txt ... and so on.

TubbyCat

Look for the code that handles package list exports and file writing. Also examine the release process to understand where checksum generation would fit. The issue mentions two separate features: checksum generation for downloads and preventing overwrite of exported package lists. Start by finding the export function and modify it to create unique filenames. For checksums, investigate the build/release scripts.

Rédigé par le modèle d'indexation à partir du texte de l'issue.