use shasum, not sha1sum
0.2.2