Kristof Csillag

Btw this broke at some point between the 17th of the 22th of June.

The missing key seems to be the one in [this line](https://github.com/mhart/alpine-node/blob/c5ec9e8a5e0ba948f9169c3a2ffe5a012100347a/build.dockerfile#L21): `4ED778F539E3634C779C87C6D7062848A1AB005C` ... which is required to verify the signature on https://nodejs.org/dist/v12.18.4/SHASUMS256.txt.asc , but is no longer available at https://keyserver.pgp.com...

Upon further inspection, I see that basically all those keys have been withdrawn... which is kind of strange, since they are even used for signing some of the latest versions....

Or maybe those PGP keys haven't been withdrawn, but are not published at a different location? That should be the case, since even v16-latest is signed by a key which...

This is how they handled this in the official node docker image: https://github.com/nodejs/docker-node/issues/1500

@mhart could you please share with us your current perspective on this issue? Thanks.

Our fork (which is the source if tihs PR) has been moved here: https://github.com/hypothesis/jquery-scrollintoview

@renanccastro what is the current status for this? Now that the reify fix has landed on the latest 2.4 beta, think are no longer terrible, but still it would be...

What third party services are you referring to? Could you please give me an example?

On thing I have forgotten to mention: we should also provide an API endpoint to retrieve the annotations belonging to a narrative in a raw, JSON form (like we do...