use sha256 checksums starting with node v0.10.0