discover the source tarball automatically