fn key(dep: PackageId) -> (&'static str, SourceId)