Needs to use an https URL to a stable, tagged tarball