There are detached sig files for Geany releases, but do any plugins or tag files (like CSS tag files) have sig files to verify them?
It's great to verify the main program, but one tampered extra file could be painful.
I doubt any Geany developers would have time to review every 3rd party submitted file, similar to Mozilla Addons. Thanks.