APKBUILD *-install scripts should be checksummed
Per the APKBUILD reference, , package *-install scripts should be checksummed to guard against incomplete/corrupt downloads. The postmarketos-base package is one example where this is not being implemented currently.
It's as simple as adding the $install
variable in the source=
in the APKBUILD, see the APKBUILD for device-nokia-rx51 for an example.