fn pkg_fingerprint(
    bcx: &BuildContext<'_, '_>,
    pkg: &Package
) -> CargoResult<String>