fix up source recipe: clearer notification chain, naming, and attributized build deps