<pkgmetadata> <upstream> <remote-id type="github">theupdateframework/notary</remote-id> </upstream> </pkgmetadata>