sha256 is :no_check, version is 'latest'