Bugzilla

> there's no readily available tool

I'm unfamiliar with your CI, but [they exist](https://github.com/symfony-cli/symfony-cli/issues/63#issuecomment-1153284152).

> The practical risk is limited: packages are served over HTTPS from a single origin (no mirrors).

Unfortunately, it would prevent installation via GNOME Software [and KDE Discover](https://discuss.kde.org/t/progress-console-in-discover/14195/16?u=rokejulianlockhart), which are the default handlers for `.RPM` files when their respective desktop environments are installed. Unless the user utilises `dnf5` or `rpm-ostree` (or `rpm`, I suppose), this means that the package may appear uninstallable.

> there's no readily available tool

I'm unfamiliar with your CI, but [they exist](https://github.com/symfony-cli/symfony-cli/issues/63#issuecomment-1153284152).

> The practical risk is limited: packages are served over HTTPS from a single origin (no mirrors).

Unfortunately, it would prevent installation via GNOME Software [and KDE Discover](https://discuss.kde.org/t/progress-console-in-discover/14195/16?u=rokejulianlockhart), which are the default handlers for `.RPM` files, when their respective desktop environments are installed. Unless the user utilises `dnf5` or `rpm-ostree` (or `rpm`, I suppose), this means that the package may appear uninstallable.

> there's no readily available tool

I'm unfamiliar with your CI, but [they exist](https://github.com/symfony-cli/symfony-cli/issues/63#issuecomment-1153284152).

> The practical risk is limited: packages are served over HTTPS from a single origin (no mirrors).

Unfortunately, it would prevent installation via GNOME Software [and KDE Discover](https://discuss.kde.org/t/progress-console-in-discover/14195/16?u=rokejulianlockhart), which are the default handlers for `.RPM` files, when their respective desktop environments are installed. Unless the user utilises `dnf5` or `rpm-ostree` (or `rpm`, I suppose), via the CLI, this means that the package may appear uninstallable.