Opkg can be configured with any additional repositories, in such case opkg can install software that updater doesn't know. This shouldn't be happening. For this reason we should read opkg custom feeds in entry script.