Fix dependency checksumming.

It looks like checksumming was broken since we changed to sources/providers.

This puts it back in place.

Do not init any dependency when the checksum hasn't changed.

/cc @d2fn