Looks like there are now packages attached to that. I'm not at a real computer but I bet they're signed.