Oh, wait--I think I see what you're getting at now.

I'm not sure what else to do about this since it requires the package name first. We could shorten it to the first 7 characters of the sha. Would that be better?