return hash for a built package instead of result