Package: devscripts Version: 2.17.9 Severity: wishlist The typical example i have under the hand is: https://nodejs.org/dist/v6.3.1/ https://nodejs.org/dist/v6.3.1/SHASUMS256.txt https://nodejs.org/dist/v6.3.1/SHASUMS256.txt.asc
As far as i remember it's not the only upstream distributing a list of signatures. Jérémy