Check SHA1 in addition to version for Github packages