# Upstream releases signed Git tags, rather than signed tarballs
xe source: debian-watch-does-not-check-gpg-signature
xe source: debian-watch-could-verify-download
