On Tue, 11 Dec 2007 15:15:27 -0500 Todd Zullinger <tmz@xxxxxxxxx> wrote: > It takes many hours to run a repoclosure and check that everything is > sane. It's not that the folks doing the updates don't want to, it's > just that no good way to do this has been implemented yet, AFAIK. :( I'm sure it takes many hours to do the full check for everything, but something puts new packages in the repo. Simple checks for the obvious dumb stuff like wrong sig seem like it ought to be possible for each package at the time it is merged into the repo.