Fwiw, on Sprout we've been using attributes for DMG/package urls that change frequently. This has allowed our users to temporarily override these URLs without having to fork cookbooks when they change and it takes us a few days to update the cookbook.

This said, this particularl installer URL should in principle be pretty stable so should really need to be configurable.