This is done by having `./gradle/verification-metadata.xml` file, more information: https://docs.gradle.org/current/userguide/dependency_verification.html