README fixes

- fix URL for packages (base package URLs still broken)
- compute hash and size for .gz file, too