The main source code repositories are located on Inferencium servers and are where development occurs, along with where issues and pull requests are managed.
It is recommended to use the main repositories over mirrors whenever possible; I have full control over the source code and configurations.
Commit, tag, and release verification should still be performed when using the main repositories; they are not a substitution for proper security checks. My personal SSH keys used for signing commits, tags, and releases can be found on the Key webpage.