Package a service and library to validate the integrity of open source package and promote its integration in package repositories