cruft-wasm (source): source-contains-prebuilt-wasm-binary fake.wasm
cruft-wasm (source): debian-watch-does-not-check-gpg-signature
