The build scripts should create a file that contains the information about which revisions from which repositories are used to create the package. Then you can always trace back to the source repos in case of problems.
