Downloader: check package name and md5 sum before installing