How about publishing hashes for the tarball? For future reference I see the following checksums on the version I just downloaded (presumably the corrected version): % md5sum torque-2.5.0.tar.gz cbab94991de44ef90d7ddb9c080238e1 torque-2.5.0.tar.gz % sha1sum torque-2.5.0.tar.gz b882625d1ba443b4458d7093ba4e82d625818759 torque-2.5.0.tar.gz Stuart