The package only lists it as a recommendation and the string 'Signature' does not occur in any source files. $ grep -rl Signature PAR-1.002/ PAR-1.002/ChangeLog PAR-1.002/META.yml PAR-1.002/Makefile.PL PAR-1.002/lib/PAR/Tutorial.pod It looks like all the code that uses it was split off into PAR::Packer in 2006. Module-Signature pulls in an additional 55 dependencies on my machine.
Removed both Module-Signature and Digest-SHA. Both are used for signed distributions.
