metadata filenames and other issue for keying the data

Hi all,
 Thinking about the structure things would need/want, etc.

How about this:

metadata.xml <- base file that contains the timestamps/checksums for the
other files for this repository
   metadata/
            base.xml - the primary file
            filelists.xml - complete file lists
            other.xml - changelogs, other stuff
           

One other issue:
 It occurred to me that it might be possible for a single repository to
have two packages that are identical n,e,v,r,a and yet different actual
packages. On this basis it might be wiser to make the key the pkgid
checksum. It's harder to traceback by sight but it might be easier and
more reliable from a programming perspective.

Thoughts?

-sv