The only difference between the generated download file and my updated
one is that the generated one puts sha1 signatures on the files because
of an older version of the build plugin. I suppose I could upversion the
build plugin to ensure that I only get 256 signatures. But I think that
point will be moot as soon as we release 2.X (which I plan to do sooner
than later) because that's on the latest version of all of our plugins.