fix a package metadata parsing bug