checksums and sizes of packages should be those of the tar files rather than of the tar.gz files