Move hash generation for source to PackageSource