package whitelist works