finish centralizing source_url, version and checksum