mirror only packages under an OSI approved license