Move copying of source package to PackageSource and make source paths private