warn when a patch doesn't have a checksum