# upstream does not provide a tarball or a git tag let alone a signature ...
debian-watch-does-not-check-gpg-signature

# yes, it's a git snapshot
hyphen-in-upstream-part-of-debian-changelog-version
