Give package root objects more version data, add shasums for tarballs