package signature handling