diff --git a/guile-json.changes b/guile-json.changes
index fc1538d..bc67914 100644
--- a/guile-json.changes
+++ b/guile-json.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Sun Nov  8 21:22:50 UTC 2015 - astieger@suse.com
+
+- add source URLs, keyring and verify source signatures
+- license is LGPL-3.0+ as per code headers
+- package license file
+
 -------------------------------------------------------------------
 Fri Nov  6 20:22:19 UTC 2015 - sleep_walker@opensuse.org
 
diff --git a/guile-json.keyring b/guile-json.keyring
new file mode 100644
index 0000000..f6f3303
--- /dev/null
+++ b/guile-json.keyring
@@ -0,0 +1,30 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+Version: GnuPG v1.2.4 (GNU/Linux)
+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+=X9PX
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/guile-json.spec b/guile-json.spec
index 1e0c4a7..bdcffa4 100644
--- a/guile-json.spec
+++ b/guile-json.spec
@@ -20,14 +20,15 @@ Name:           guile-json
 Version:        0.4.0
 Release:        0
 Summary:        JSON module for Guile
-License:        LGPL-3.0
+License:        LGPL-3.0+
 Group:          Development/Libraries/Other
 Url:            https://savannah.nongnu.org/projects/guile-json/
-Source0:        %{name}-%{version}.tar.gz
-Source1:        %{name}-%{version}.tar.gz.asc
+Source0:        http://download.savannah.gnu.org/releases/guile-json/%{name}-%{version}.tar.gz
+Source1:        http://download.savannah.gnu.org/releases/guile-json/%{name}-%{version}.tar.gz.asc
+Source2:        https://savannah.nongnu.org/people/viewgpg.php?user_id=11331#/%{name}.keyring
+BuildRequires:  guile >= 2.0.0
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-BuildRequires:	guile >= 2.0.0
-BuildArch:	noarch
+BuildArch:      noarch
 
 %description
 Guile-json is JSON module for Guile. It supports parsing and building
@@ -44,14 +45,14 @@ are the main features:
 
 %build
 %configure
-make %{_smp_mflags}
+make %{?_smp_mflags}
 
 %install
-make install %{_smp_mflags} DESTDIR="%{buildroot}"
+make install %{_smp_mflags} DESTDIR=%{buildroot}
 
 %files
 %defattr(-,root,root,-)
-%doc
+%doc AUTHORS COPYING.LESSER NEWS README
 %{_datadir}/guile/site/json*
 
 %changelog