Again accepting null or empty package ids feels kinda wrong.