RE: package hashes