# Upstream releases signed Git tags, rather than signed tarballs
extrace source: debian-watch-does-not-check-gpg-signature
extrace source: debian-watch-could-verify-download
