Lintian Reports

P debian-watch-does-not-check-gpg-signature

All reports of debian-watch-does-not-check-gpg-signature for the archive. The extended description of this tag is:

This watch file does not specify a means to verify the upstream tarball using a cryptographic signature.

If upstream distributions provides such signatures, please use the pgpsigurlmangle options in this watch file's opts= to generate the URL of an upstream GPG signature. This signature is automatically downloaded and verified against a keyring stored in debian/upstream/signing-key.asc

Of course, not all upstreams provide such signatures but you could request them as a way of verifying that no third party has modified the code after its release (projects such as phpmyadmin, unrealircd, and proftpd have suffered from this kind of attack).

Refer to the uscan(1) manual page for details.

Severity: pedantic

Check: debian/watch

This tag is experimental. Please file a bug report if the tag seems wrong.

Emitted (non-overridden): 110, overridden: 3, total: 113

The package names link to the relevant maintainer page and the corresponding report for the source package. The links go to the full maintainer report page, which includes info and experimental tags and overridden tags, rather than the default page that shows only errors and warnings.

anypaper 2.4-2 (source) (Alejandro Garrido Mota <alejandro@debian.org>)


arch-test 0.16-2 (source) (Adam Borowski <kilobyte@angband.pl>)


aspell-ku 0.20-0-8 (source) (Lior Kaplan <kaplan@debian.org>)


autossh 1.4g-1 (source) (Axel Beckert <abe@debian.org>)


boot-info-script 0.78-1 (source) (Chris Hofstaedtler <zeha@debian.org>)


brasero 3.12.2-6 (source) (Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>)


camp 0.8.4-1 (source) (Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>)


cnvkit 0.9.6-3 (source) (Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>)


dact 0.8.42-5 (source) (QA Group <packages@qa.debian.org>)


django-prometheus 2.0.0-1 (source) (Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>)


dltlyse 1.1-1.1 (source) (Aigars Mahinovs <aigarius@debian.org>)


docbook 4.5-6 (source) (QA Group <packages@qa.debian.org>)


dov4l 0.9+repack-1 (source) (Anders Lennartsson <anders@lennartsson.se>)


duo-unix 1.11.3-1 (source) (Kees Cook <kees@debian.org>)


el-mock-el 1.25.1-3 (source) (Debian Emacsen team <debian-emacsen@lists.debian.org>)


flake 0.11-4 (source) (Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>)


fonts-lohit-deva-marathi 2.94.2-2 (source) (Debian Fonts Task Force <debian-fonts@lists.debian.org>)


fosfat 0.4.0-13-ged091bb-3 (source) (Didier Raboud <odyx@debian.org>)


fst 0.115.0-1 (source) (Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>)


ganymed-ssh2 250-3 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


glirc 2.32-1 (source) (Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>)


golang-github-cyberdelia-heroku-go 5.1.0-1 (source) (Debian Go Packaging Team <team+pkg-go@tracker.debian.org>)


golang-github-gokyle-fswatch 0.0~git20121217.1dbdf83-1 (source) (Debian Go Packaging Team <team+pkg-go@tracker.debian.org>)


golang-github-huandu-xstrings 1.2.1-1 (source) (Debian Go Packaging Team <team+pkg-go@tracker.debian.org>)


golang-github-libvirt-libvirt-go 6.0.0+git20200210.224cad8-2 (source) (Debian Go Packaging Team <team+pkg-go@tracker.debian.org>)


golang-github-xyproto-pinterface 2.0-2 (source) (Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>)


golang-gopkg-olivere-elastic.v5 5.0.83-1 (source) (Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>)


gst-libav1.0 1.16.2-2 (source) (Maintainers of GStreamer packages <gst-libav1.0@packages.debian.org>)


haskell-constraints 0.10.1-2 (source) (Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>)


haskell-fdo-notify 0.3.1-10 (source) (Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>)


haskell-linear 1.20.9-1 (source) (Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>)


haskell-tasty-golden 2.3.2-3 (source) (Debian Haskell Group <pkg-haskell-maintainers@lists.alioth.debian.org>)


igdiscover 0.11-3 (source) (Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>)


ini4j 0.5.2-SNAPSHOT-5 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


ipwatchd 1.2.1-1 (source) (Jaroslav Imrich <jariq@jariq.sk>)


jquery.sparkline 2.1.2-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


kineticstools 0.6.1+git20180425.27a1878-2 (source) (Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>)


kraft 0.90-2 (source) (Debian KDE Extras Team <pkg-kde-extras@lists.alioth.debian.org>)


latex2html 2020-debian1-1 (source) (Carsten Leonhardt <leo@debian.org>)


libapache2-mod-auth-gssapi 1.6.1-1 (source) (Debian FreeIPA Team <pkg-freeipa-devel@alioth-lists.debian.net>)


libapache2-mod-authnz-pam 1.2.0-1 (source) (Debian FreeIPA Team <pkg-freeipa-devel@alioth-lists.debian.net>)


libbasicplayer-java 3.0-6 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


libbio-mage-perl 20030502.3-5 (source) (Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>)


libbio-searchio-hmmer-perl 1.7.3-2 (source) (Michael R. Crusoe <michael.crusoe@gmail.com>)


libdata-float-perl 0.013-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libdbix-contextualfetch-perl 1.03-4 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libextutils-parsexs-perl 3.350000-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


liblocale-msgfmt-perl 0.15-2 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libmath-bezier-perl 0.01-2 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libnet-ldap-filterbuilder-perl 1.200002-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libnet-radius-perl 2.103+dfsg-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libpath-tiny-perl 0.108-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libpdl-io-hdf5-perl 1:0.73-5 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libplack-perl 1.0047-2 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libpod-wordlist-hanekomu-perl 1.132680-2 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


librdf-rdfa-parser-perl 1.097-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libstring-copyright-perl 0.003006-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libtest-roo-perl 1.004-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


libtest-www-mechanize-perl 1.52-1 (source) (Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>)


lm-sensors 1:3.6.0-2 (source) (Aurelien Jarno <aurel32@debian.org>)


lxpanel 0.10.0-2 (source) (Debian LXDE Maintainers <pkg-lxde-maintainers@lists.alioth.debian.org>) overridden


madlib 1.3.0-2.1 (source) (Christophe Prud'homme <prudhomm@debian.org>)


madness 0.10.1~gite4aa500e-10.1 (source) (Debichem Team <debichem-devel@lists.alioth.debian.org>)


mate-menus 1.24.0-1 (source) (Debian+Ubuntu MATE Packaging Team <debian-mate@lists.debian.org>)


nast 0.2.0-7 (source) (QA Group <packages@qa.debian.org>)


netcdf 1:4.7.3-1 (source) (Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>)


nethack 3.6.1-1 (source) (Debian Games Team <pkg-games-devel@lists.alioth.debian.org>)


node-carto 0.9.5-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-cli-spinners 1.1.0-1 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-colormin 1.1.2-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-eslint-plugin-flowtype 2.25.0-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-execa 0.10.0+dfsg-1 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-posix-character-classes 0.1.0-1 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-resolve-cwd 2.0.0-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-rollup-plugin-node-resolve 3.4.0-4 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-strip-json-comments 3.0.1-3 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-text-encoding 0.7.0-1 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


node-y18n 4.0.0-2 (source) (Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>)


nsscache 0.39-2 (source) (Jamie Wilkinson <jaq@debian.org>)


octave-queueing 1.2.6-6 (source) (Debian Octave Group <team+pkg-octave-team@tracker.debian.org>)


octave-tisean 0.2.3-3 (source) (Debian Octave Group <team+pkg-octave-team@tracker.debian.org>)


openblas 0.3.9+ds-1 (source) (Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>)


opencryptoki 3.8.1+dfsg-3.1 (source) (Paulo Vital <pvital@gmail.com>)


openvas-scanner 7.0.0-1~exp1 (source) (Debian Security Tools <team+pkg-security@tracker.debian.org>)


osgi-annotation 6.0.0-2 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


plexus-bsh-factory 1.0~alpha7-4 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


plexus-sec-dispatcher 1.4-4 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


pngtools 0.4-1.3 (source) (Nelson A. de Oliveira <naoliv@debian.org>)


pylibtiff 0.4.2-6 (source) (Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>)


pysrt 1.0.1-2 (source) (Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>)


python-channels-redis 2.4.2-1 (source) (Debian Python Modules Team <python-modules-team@lists.alioth.debian.org>)


python-oslo.log 3.44.1-2 (source) (Debian OpenStack <team+openstack@tracker.debian.org>)


python-simplenote 2.1.4-1.1 (source) (Stefan van der Walt <stefanv@berkeley.edu>) overridden


qtx11extras-opensource-src 5.12.5-1 (source) (Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>)


r-cran-assertive.sets 0.0-3-2 (source) (Debian R Packages Maintainers <r-pkg-team@alioth-lists.debian.net>)


r-cran-logging 0.10-108-1 (source) (Debian R Packages Maintainers <r-pkg-team@alioth-lists.debian.net>)


r-cran-mclust 5.4.5-1 (source) (Debian R Packages Maintainers <r-pkg-team@alioth-lists.debian.net>)


r-cran-rex 1.1.2-2 (source) (Debian R Packages Maintainers <r-pkg-team@alioth-lists.debian.net>)


r10k 3.4.1-3 (source) (Puppet Package Maintainers <pkg-puppet-devel@lists.alioth.debian.org>)


reflex 0.2.0+git20181022.3df204f-1 (source) (Kyle Robbertze <krobbertze@gmail.com>)


ruby-buff-extensions 2.0.0-1 (source) (Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>)


ruby-http-form-data 2.2.0-1 (source) (Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>)


ruby-test-unit-notify 1.0.4-2 (source) (Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>)


shelldap 1.5.1-1 (source) (Salvatore Bonaccorso <carnil@debian.org>)


shut-up 0.3.2-3 (source) (Debian Emacsen team <debian-emacsen@lists.debian.org>) overridden


siege 4.0.4-1 (source) (Josue Abarca <jmaslibre@debian.org>)


sisu-ioc 2.3.0-11 (source) (Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>)


skydns 2.5.3a+git20160623.41.00ade30-2 (source) (Debian Go Packaging Team <pkg-go-maintainers@lists.alioth.debian.org>)


spotlighter 0.3-1.1 (source) (Andrea Colangelo <warp10@debian.org>)


tpb 0.6.4-11 (source) (QA Group <packages@qa.debian.org>)


wordwarvi 1.00+dfsg1-4 (source) (Debian Games Team <pkg-games-devel@lists.alioth.debian.org>)


xfce4-xkb-plugin 1:0.8.1-2 (source) (Debian Xfce Maintainers <debian-xfce@lists.debian.org>)


xserver-xorg-input-mutouch 1:1.3.0-1 (source) (Debian X Strike Force <debian-x@lists.debian.org>)