Fixed SHA and package URl