Trusty package descriptor