EUMM has broken distsignature rules with parallel make (see Perl-Toolchain-Gang/ExtUtils-MakeMaker#177) so it would be nice to easier check the generated tar.gz, not only .zip.
Add tar.gz support to _unzip_to_tmpdir
make dist # with SIGN=>1
cpansign -v <generated-tar.gz>
Very often the generation of META.json is delayed, thus the SIGNATURE invalid.