This looks good. Although we should consider simply SHAing the `source` URL and storing it that way to avoid collisions with other cookbooks that download files that might be named the same. Since we are just using the basename, if two files have the same basename but come from different URLs, they might be downloaded on each run.