Well, I just discovered something obvious about flat packages – you can't reference the contents directly. This causes postinstall actions like copying a config file or running an extra script from the package to fail.
The GDAL, SQLite3 and GEOS frameworks and Postgres and PHP were affected, and are now fixed.