# upstream does not always sign the releases
dq source: orig-tarball-missing-upstream-signature dq_*.orig.tar.gz
