# Upstream does not provide detached PGP signatures for their source tarballs. django-reversion source: debian-watch-may-check-gpg-signature