PGP key cannot be verified because it is not published on the GitHub page

This library causes problems with Gradle dependency verification. The libraries are signed and the key is available on hkps://keyserver.ubuntu.com, but it is self-signed and not listed on the GitHub page.

If you would publish the key on GitHub then users could verify that the libraries are actually signed with your key.

Start by checking the repository's GitHub page and any release or signing guidance for where the project's PGP key is published. Confirm the key available from keyserver.ubuntu.com and make it available on GitHub so users can verify signed Gradle dependencies.

Written by the indexing model from the issue text.