hash tarballs to get shasums!
5.2.0