Download-only option for upstream sources, checksum verification.