From 0675c99948568ef0ed5236a6f64519bae083e3fb Mon Sep 17 00:00:00 2001
From: John Marion <jmariondev@gmail.com>
Date: Mon, 3 Jul 2017 12:35:28 -0700
Subject: [PATCH] Add stub verify method.

I was going to implement gnupg, but the python bindings for it are GPL
licensed. I need to find an appropriately-licensed alternative.

This verify method does no actual verification.

Related Packeteers/GoldDust#4
---
 golddust/packages.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/golddust/packages.py b/golddust/packages.py
index 3c07029..418793d 100644
--- a/golddust/packages.py
+++ b/golddust/packages.py
@@ -14,6 +14,7 @@
 
 
 import json
+import warnings
 
 
 """GoldDust Packages Classes/Utilities
@@ -65,6 +66,15 @@ def from_package_file(cls, file):
         # TODO: Dependencies
         return package
 
+    def verify(self):
+        """Verify the integrity of this package.
+
+        This verifies the package tarball using its detached PGP signature.
+        """
+        warnings.warn("Package verification is not yet implemented. "
+                     "You are working with an unverified package.")
+        return True
+
 
 class InstallScript:
     """Package pre/post install action script.