package/index: fix index creating when building without signing