Remove unused checksum attribute
Use cutlery to ensure the presence of the package url attribute
Ensure the base_dir has the correct permissions for world read/execute but no write
Default the package url to nil and require that the user supply the url
Assume package is a zip and fail chef exec when failed to unpack package