[#27] fix package_list_for_source for unowned data sources