apache-commons-codec-1.8-1.jpp6.noarch.rpm is not signed

Hello All,

As the subject says 

apache-commons-codec-1.8-1.jpp6.noarch.rpm is not signed

I have tried a number of different mirrors and they all have an unsigned copy of this package.  Is someone able to sign this package.  I also wanted to check if this site project is still active.  it seems like the mailing list has not see any activity since feburary.  I also noticed a couple of dead links[1][2]

Thanks John


[1]http://www.jpackage.org/cvsaccess.php all the cvs links
[2]https://www.jpackage.org/bugzilla/