Probably the same reason that pretty much no other package manager (or even major email provider, when email is ostensibly the most famous use-case for it) has adopted it: the UX is atrocious.

▲

Macha 25 days ago | parent [-]

Basically all Linux distro package managers?

	▲	saghm 24 days ago \| parent \| next [-]
		That's fair, distro package managers use it. I don't know of any language that uses it though; I think NuGet uses certificates for signing rather than PGP.
	▲	exabrial 23 days ago \| parent \| prev [-]
		All of maven central? Is that also significant enough (as well)? NIH nihilism