guzzle source: debian-watch-could-verify-download
guzzle source: debian-watch-does-not-check-openpgp-signature
guzzle source: orig-tarball-missing-upstream-signature
