don't look at package.metadata.cross when the package isn't part of the current workspace

don't look at package.metadata.cross when the package isn't part of the current workspace #4319