added new 'sources' file to tarball (might not get used though)