Function runnable 

fn runnable<'a>(
    packages: &'a [WidgetPackageInfo],
    id: &str,
    hash: &str,
) -> Option<&'a WidgetPackageInfo>

The package as it is now, if it may run at all: approved, at this hash, sandboxed (a trusted widget runs in the app and needs no session).