signer

To test Scoop's signing features against a locally-running signing service:

• Install mkcert
• Then, in this directory, run bash ./run.sh

(An equivalent is npm run dev-signer. Note that this will overwrite the top-level .env.)

To maintain requirements.txt, we use Poetry, hence the presence of pyproject.toml and poetry.lock; to update a package, run something like

poetry update requests
poetry export -o requirements.txt
poetry version 0.1.1

and commit the changes. (Versioning is not strictly necessary here.)