A package should not be able to exist without any uploads
associated and removal should be done atomically. If not, better catch
and fix than having extraneous checks.