4 ms·pup bundlers also tend to be signed. just checking for a valid signature would not be enoughby slipstream- 8y agopup bundlers also tend to be signed. just checking for a valid signature would not be enough