FYI -
cpansign -v
reports a signature mismatch on META.yml for IO-1.23 under: Perl, v5.8.6
built for darwin-2level. Specifically:
$ cpansign -v
Executing gpg --verify --batch --no-tty
--keyserver=hkp://pgp.mit.edu:11371
--keyserver-options=auto-key-retrieve SIGNATURE
gpg: Signature made Sat Mar 25 21:28:07 2006 EST using DSA key ID 06D8C374
gpg: Good signature from "Graham Barr <gbarr@pobox.com>"
gpg: aka "Graham Barr <gbarr@cpan.org>"
gpg: aka "Graham Barr <gbarr@perl.org>"
--- SIGNATURE Sat Mar 25 21:28:07 2006
+++ - Wed Dec 31 19:00:00 1969
@@ -28,7 +28,7 @@
SHA1 5b1ae9040dd2bc85b7b1a73e413f5a8ff99b384f IO/Socket/INET.pm
SHA1 62ac6d72686dd4deb56baa1606af9e94082ee15f IO/Socket/UNIX.pm
SHA1 57500484aa8174c7b860564da51ab9186043f655 MANIFEST
-SHA1 2fa32b8a0f45a92c6f0b828c2fba5084a92fd22d META.yml
+SHA1 0b2c216fe3a5c478e200f2567ce471438aa846ea META.yml
SHA1 b825602e67f86b15c9b3df6941df362faf9bca7b Makefile.PL
SHA1 95dd3cdd177410b7e05e8be47257de3fd0e5a2de README
SHA1 5f8c30523272b59c8952b2c63579f78de5e5f239 poll.c
==> MISMATCHED content between SIGNATURE and distribution files! <==
Because I do not believe META.yml does anything for ExtUtils::MakeMaker,
I ran Makefile.PL, make, and make test, and had no problems with any of
them. I assume that the SIGNATURE got made against a stale META.yml somehow.
The two failures at http://cpantesters.perl.org/show/IO.html appear to
be cpanplus reporting the same problem.