Just sign the tar (not .gz) and re-tar it with Haskell's lib during s…
Remove SHA2 dependency.
Just sign the whole archive rather than the contents, added some help.
Update docs to reflect archive writing change.
Don't sort file contents.
Remove redundant optparse-applicative dependency.
Write to original file instead of making duplicate.
Move .sig to inside the project name directory.
Move to SHA256 hash over MD5.