allow the url to the source tarball to be overridden