lock nexus.external_version to match nexus.checksum

potential solution to #41