@var array<string, string> Map of package name to reference/commit hash
Type: references
protected $references = [];