Upstream tarballs tracked in git