let me clarify: package checksum matches