Fix: signed packages have no signature