Retired
Reason for Retirement: The issue is acknowledged but set to won't-fix. Please
reopen this issue in the new bugtracker if it is still an issue.
New Bugtracker : http://bugs.launchpad.net/smart
further details:
https://blueprints.launchpad.net/smart/+spec/bug-reporting-migration

I might be wrong, but AFAIK the package info comes from the local package
database (which doesn't store where the package came from) and the channels
information (that doesn't know if they're installed or not). There is no third
information source, which means it would be rather difficult to implement such
feature, unless this third db could be implemented. There are many implications
on that, including speed (cache/db update, search, etc), and data accuracy (two
dbs aread easier to sync than three). Perhaps Niemeyer should give the final
word here, as being the lead (only?) developer, but IMHO this can't be
implemented without a big review and many changes in Smart.

The --urls option is not what I mean... it shows where a package is available 
*now*. Note if you 'smart channel --disable cooker', the 'Cooker' channel is 
not shown anymore in the Channels: field for a package. 
 
What I mean is for Smart to record the repository and URL from where the 
package was actually downloaded/installed, possibly never losing nor allowing 
changes to this information, except automatically deleting it when the package 
is removed. Note the "origin" information would stay even if the origin 
channel was removed.

This is already implemented.

# smart info smart --urls
(...)
Name: smart
Version: 0.40-4mdk@i586
(...)
Channels: Cooker; RPM Database
(...)
URLs:
 Cooker
   
ftp://anorien.csc.warwick.ac.uk/Mandriva/devel/cooker/i586/media/main/smart-0.40-4mdk.i586.rpm

Notice the info "Channels: Cooker; RPM Database", which means the rpm is
installed (RPM Database) and can be found on the channel named "Cooker" (with
the url showing bellow).

The repository (URL?) and/or channel/media name of a package origin should be  
registered by Smart at package-installation time. 
This would be useful for support people, telling friends where to get a  
specific package, maybe even for security (package trust, "did I got this 
package from that compromised repository?", ...), etc.