Check hashes on files downloaded with waf deps.