@danielbachhuber what if the `master` branch does not correspond to the latest stable release? In such case, in addition to the Git repo source URL for the package, the yml package manifest could include a ref like `refs/heads/stable` or `refs/tags/v1.0` so that the specific branch or tag could be referenced. Likewise, a specific commit hash could be listed in the manifest.