More reverse engineering of packages checked into vendor