This should be `<package>#<sha>`