better: `sources = [SOURCELOWER_TAR_GZ]`