I want to give them props for doing this. Some of the successful projects I've worked on talked with people, outside of issue queues and slack, to understand their needs. It worked out well in crafting useful solutions.

Wish I knew what sq adds to the existing gnupg suite.

They say on their website what they believe they add, but unfortunately right now it still isn't in a stage to replace GnuPG. I will say trying to automate GnuPG key management sucks right now, so at least Sequoia might be able to get the DevOps crowd.

The only way to programmatically interact with GnuPG is through spawning the CLI. Not good.

What's wrong with gpgme?

It's thousands of lines of C code that just wraps an actual execution of the `gpg` binary?

You could start by, you know, Googling the source code for GPGME. Or, for that matter, reading the GPGME documentation. This isn't an eldritch secret of how GPGME works.

Yikes...

Best summarization evah!

It can encrypt for expired keys.

I might be missing a legitimate use case, but that doesn’t seem like a good thing in general.