MD5 is a pretty old hash format and hasn't been considered especially secure for about a decade.
Module::Signature switched to SHA256 about five years ago, so switching to that too might be a good idea. Especially as this means that any recent CPAN distributions packaged with Module::Signature in mind will include a SIGNATURE file (an example!) GPG-signed by the author, listing the SHA256 hashes for every file in the distribution including all modules.
In reply to Re^2: [NTF] Paranoic.pm to check md5 of loaded modules
by tobyink
in thread [NTF] Nice Perl ideas I have no time for
by Discipulus
| For: | Use: | ||
| & | & | ||
| < | < | ||
| > | > | ||
| [ | [ | ||
| ] | ] |