w64devkit now signs every binary and locks releases so even its author can't tamper with them
What's been going on in w64devkit the past year
Over the past year, w64devkit gained a co-maintainer, Peter0x44, and a wave of improvements: all EXEs and DLLs are now code-signed, releases are immutable and built transparently via GitHub Actions, the x64 build became multilib, and CMake, Ninja, Ccache, NSIS, Zstandard, and a graphical CMake debugger were added. The author also rewrote C11 threads for Mingw-w64 and is experimenting with FatLTO runtimes.
On publish, release artifacts are locked in and nobody, not even me, can modify them.