handle fetching of packages without sources more gracefully