# SOURCE_INVALID: Invalid source package

> Invalid source package

| Severity | Fault                         | Stage          |
| -------- | ----------------------------- | -------------- |
| error    | customer (the source package) | source package |

## What it means

The source package is not a gzip-compressed POSIX tar that Taggor reads safely: it is empty or not exactly one gzip member, it is a GNU or v7 tar, a header is corrupt or truncated, an entry other than a file has a body, a pax header is too large or has a key that is not allowed, two files have the same name (also when only letter case or Unicode normalization differs) or a file is also a folder, or a file is not UTF-8 text.

## How to fix

Let the Taggor CLI pack the component, or create a POSIX tar of regular UTF-8 files only (tar --format=posix -czf component.tgz src; GNU tar writes its own format without --format=posix). The message names the file that was refused.