<pkgmetadata> <upstream> <remote-id type="github">quadrantsec/sagan-rules</remote-id> </upstream> </pkgmetadata>