I have not tested this yet. I added the new field at the end so that existing packages are not broken (I have a large v3 repository by now and I'd really hate having to rebuild it). I assume this should be fine backwards-compatibility-wise?
Fixes #10826 (closed)
Fixes #10884 (closed)