but the pkg is not signed right? <https://github.c...
# core