The source package was signed using a weak algorithm (such as SHA-1) === Please feel free to respond to this email if you don't understand why your files were rejected, or if you upload new files which address our concerns.