Securing packages to supporting devices