(some way to verify the orig tarball against upstream would be good, too - I don't see a debian/watch file)
(some way to verify the orig tarball against upstream would be good, too - I don't see a debian/watch file)