It's in our released downloads at https://keybase.io/download

We don't use GitHub releases often.

https://keybase.io/download just points back to github for source.

You also haven't tagged anything more recent than that github release: https://github.com/keybase/client/tags

If you're not tagging or doing github releases, is there a list of 'stable' versions that distros should consider packaging?

No, sorry. We're still making a new release almost every day, and we have no stable branches, only master.

We'd prefer people to just install our own package.

I don't suppose you could tell us where the version number comes from then? I looked at opt/keybase/version of the 'now' package (20170214-1250 UTC) you host for Linux x64 and it says v1.4.12. What is the git commit reference for that version?

I would fully recommend against people installing packages from outside their distro. especially crypto related ones.

Do you consider master stable? i.e. should we consider packaging every master commit?

Is there another location for official source releases? The Nix expression [1] builds from source from GitHub releases, but it could easily be modified to point to an different address on the web to stay more up-to-date.

[1] https://github.com/NixOS/nixpkgs/blob/711a42e03aa44439142bb8...