File _aggregate of Package john

<aggregatelist>
  <aggregate project="security">
    <package>john</package>
  </aggregate>
</aggregatelist>