check that specified package and version exist

- responds with 404 otherwise