On Wed, 27 Sep 2017 13:47:56 +0200 "Dr. Tobias Quathamer"
<to...@debian.org> wrote:
> Dear maintainer,
>
> your package recommends python-gpgme in d/control. Please note that the
> package python-gpgme will be removed from Debian unstable soon
> (https://bugs.debian.org/876844).
>
> If the successor "python-pgp" can be used as well with your package,
> then please recommend python-pgp instead. Otherwise, please just remove
> python-gpgme from d/control.
The problem is broader than that as there is now no check of the GPG/PGP
signature of the downloaded binaries anymore
The dependency of python-pgp should maybe be bumped to Depends instead
of Recommends also
