Why gpgme instead of native openpgp?

[mikeatlas]

In the signature package, the mechanism source uses a cgo wrapper for GnuPG Made Easy library: github.com/mtrmac/gpgme. Is there a reason why this was chosen over pure Go's native OpenPGP package?

Thanks.

[mtrmac]

Please see the extensive discussion currently happening in containers/skopeo#274 ; let’s discuss there instead of splitting that into two places.

[mikeatlas]

Thanks