# upstream does not sign tarballs; discussing that
pygame source: debian-watch-does-not-check-gpg-signature
