can do things with the most updated version of pkg metadata from repos

[dpastoor]

getting remote metadata is an expensive operation, so for UX, want to cache

edge cases:

• repository has updated but the cache still is valid, so must be forceably invalidated