read signatures with mmap
add double -c flag as a deap clean
improve find_repo, store repo's root dir
cleanup find_packages/find_repo
verify database and packages are in the same place
skip directories if invalid path