# Upstream doesn't provide signatures for their tarballs
thuban source: debian-watch-may-check-gpg-signature
