Oops, don't use md5 of a source package