Identify the upstream repos and exact revisions corresponding to the source packages. Build them from there, taking the tarballs out of the equation.