amend MD5 and Sha goodie metadata, add attribution