Thank you for using Graphite and your support. This is something we're aware of and current thinking around.
Question, if we were to support this by signing commits: Would you want the commit to be signed by the Graphite GitHub App? Or would you prefer for it to be signed by Graphite on behalf of you? Or some other option that we haven't considered?
-Xiulung (UX @ Graphite)
One thing that's been a bit annoying: my org enforces signed commits, and when you merge a stack, they sometimes rebase commits internally and lose the code signing, so you end up with an error to merge the rest of the stack.
Aside from that, working with stacks has been great!
Now I think the remaining stuff is fine, paying for a stripe integration and oauth libraries doesn’t trigger any alarms for me, personally.