Need a way to unique identify packages, such name + version + ? perhaps. If it is a version, then we needs means to reliably determine version of a package. If package is not versioned, perhaps hash the content?