Working only on my second AUR package, please bear with me.
To verify integrity, the author does not provide checksums but only a gpg .asc file.
What is the preferred way for me to proceed?
The author is active and available so I can ask him to post a sha256 on his website; but I'm trying not to be too demanding, preferring to keep my requests on the subject of the application itself, e.g. features, etc.
It's not a big deal but just wanted to check with the community here in case I am missing something.