fix long-standing bug with duplicate files in package tars
update todo list