We can only accept this if it pulls from a stable, tagged download. It appears that if this file is changed in-place, say with a new version, the sha1 will change and the formula will silently break.