In the SdGlue Python module, rename "sdapihack" to "sdapilibs". Partly for the obvious reason, don't release anything with "hack" in its name. Even when the name isn't directly visible to users. And partly because there exists an old, private module using "sdapihack" which isn't supposed to be in use but would cause a name clash and several hours of debugging if it was accidentally installed. Been there, done that.
Change how source code is checked in the Azure pipeline. Monitor both the source repository and the binary dependency repository for changes. And report the branch and commit hash of both. Note that in the OSDU baseline the azure configuration is just an example.