I have more to add to those questions. Does SPM, Cocoapods third-party libraries needs to signed by authors ? If so, those third-party libraries are compiled with our project so is it us who are the app builders needs to sign those libraries ? What if the authors of the third-party libraries stop supporting the library. AFNetworking is not supported anymore, so what we should do about this ? We are using a third-party library that uses another third-party library. If it is not signed with the authors, what should we do ?