We should probably do something like use the source repo in the source_file.  This has the added benefit of not requiring the package to have been released, and the metrics will update when code changes, not on release.