Use zip verifiers for jars where md5 is unavailable, use file size for
assets