update-phar: OSX doesn't ship with md5sum, so use md5 -r