package names should be hashes for now