Here's another person auditing the checksum database: https://raphting.dev/posts/gosumdb-live-again/