avoid relying on download.zope.org