Auditing a package