very basic support for unpublishing a package