Does this apply to upstream packages distributed by Gentoo too? Or just things that the Gentoo project is itself upstream, like emerge?