Well, I let things go too late. Let's see... I want to write a test that confirms that URL constraints apply to packages required as dependencies.
Okay, did that. I think some of the more elaborate tests I had in mind might have been overkill. I'm going to figure out the hash tests later.
For now, I'm going to plug my laptop back in and get ready for bed. Okay, yeah, the new test looks good so far.