Don't leave commented-out url and sha1 below...but we kind of don't want to point to arbitrary revisions either.

What does gentoo use for the download source? Does Debian package this?