toolkit: checksumpkg