[backend] projectsourceinfo: allow empty package list for remote projects