allow custom tarball url