### Summary GPG keys should be properly linked from the source tarball page ### Details The links on the source page for PHP 8.3's can be seen here: https://www.php.net/downloads.php?source=Y If you scroll down to php 8.3.25, there is a link to "GPG Keys for PHP 8.3". This takes the user to this page: https://www.php.net/downloads.php#gpg-8.3 The page does not contain the GPG keys, so users who choose to verify the code cannot do so. ### Additional context _No response_
Activity
sy-records commentedon Sep 6, 2025
Good catch! Thank you for your feedback.