Function source_allowed 

pub fn source_allowed(allowed: Option<&[String]>, source: &str) -> bool

VAPP-107: may a package whose sources list is allowed follow this source URI? None = yes; else the URI’s scheme:name (scheme lower-cased, the query dropped) must match a listed source exactly or a prefix* pattern.