oops, new default archives have corrupt extensions
better check if a package is now signed