1 files changed, 2 insertions, 0 deletions

diff --git a/apt-panopticon.lua b/apt-panopticon.lua
index da349fd..5aaa858 100755
--- a/apt-panopticon.lua
+++ b/apt-panopticon.lua
@@ -950,6 +950,7 @@ if 0 < #arg then
                         execute('diff -U 0   results_old/pkgmaster.devuan.org/merged/dists/' .. n .. '/Release.SORTED ' ..
                                             'results/pkgmaster.devuan.org/merged/dists/' .. n .. '/Release.SORTED ' ..
                                             '| grep -v "@@" | grep "^+" | grep "Packages.xz$" |  cut -c 77- >results/NEW_Release_' .. n .. '.txt')
+-- TODO - Maybe check the date in Release, though since they are updated daily, is there any point?  Perhaps it's for checking amprolla got run?
                     else
 -- TODO - compare to the pkgmaster copy.
                     end
@@ -1012,6 +1013,7 @@ if 0 < #arg then
                                         if m ~= fm:sub(2, -2) then E('Package MD5 sum mismatch - results/' .. pu.host .. "/merged/" .. p, 'http', 'Integrity', pu.host) end
                                         local status, fsha = execute('sha256sum results/' .. pu.host .. "/merged/" .. p .. ' | cut -d " " -f 1')
                                         if sha ~= fsha:sub(2, -2) then E('Package SHA256 sum mismatch - results/' .. pu.host .. "/merged/" .. p, 'http', 'Integrity', pu.host) end
+-- TODO - maybe check the PGP key, though packages are mostly not signed.
                                     end
                                 end
                                 if testing("Updated") then