sha1sum/md5sums for all dependency fetch rules