Web Packaging in the W3C draft was a completely different idea - there's not even a single mention of signatures. The "specification" you linked is actually a standards draft published by Google. And the open source project is again, another Google project that only benefits their AMP ecosystem.