Ensuring package sources