Funny, I thought of that super nit item myself. I wanted to avoid stepping on an actual GitHub username. I can just make something up.

I started out not mocking and using an actual package file for two reasons:

1. other code will actually save the package itself, and I wanted to be able to test those cases
2. didn't have rewire initially :)

So, I'm mocking validate for the cases where I want to use some data other than what's in the package that's already on disk.