If the `:metadata` source is specified, you should probably record and compare the SHA of the `metadata.rb`, too.