diff --git a/packages/signing-utils/.depcheckrc b/packages/signing-utils/.depcheckrc
index 48bf9af6..961ff64e 100644
--- a/packages/signing-utils/.depcheckrc
+++ b/packages/signing-utils/.depcheckrc
@@ -4,5 +4,6 @@ ignores:
  - '@types/chai'
  - '@types/sinon-chai'
  - 'sinon'
+ - '@types/ssh2'
 ignore-patterns:
  - 'dist'
diff --git a/packages/signing-utils/package.json b/packages/signing-utils/package.json
index fdbf96d3..a7e8b8b3 100644
--- a/packages/signing-utils/package.json
+++ b/packages/signing-utils/package.json
@@ -19,7 +19,8 @@
     "url": "https://github.com/mongodb-js/devtools-shared.git"
   },
   "files": [
-    "dist"
+    "dist",
+    "src"
   ],
   "license": "SSPL",
   "main": "dist/index.js",
diff --git a/packages/signing-utils/src/signing-clients/index.ts b/packages/signing-utils/src/signing-clients/index.ts
index e7ed4a13..2038f846 100644
--- a/packages/signing-utils/src/signing-clients/index.ts
+++ b/packages/signing-utils/src/signing-clients/index.ts
@@ -48,7 +48,7 @@ export async function getSigningClient(
     return sshClient;
   }
 
-  const signingScript = path.join(__dirname, '..', 'src', './garasign.sh');
+  const signingScript = path.join(__dirname, '../..', 'src', './garasign.sh');
 
   if (options.client === 'remote') {
     const sshClient = await getSshClient(options);