package authenticity