+1 for this. It would also be nice to have signed .nupkg so they can be verified with "dotnet nuget verify".