ArtifactRetriever now expects File as destination instead of URL
introduced SHA1ArtifactRetriever, which performs SHA1 based validation after retrieving the artifact
ignoring SHA1 file contents from remote repository beyond 40th character
TODOs