openpgp with component.json