This could be included in the famaus automatic build and/or packaging system, coundn't it?... And finally: Shouldn't packages like 'make' and 'sed' have checksums generated?Yes. ;-)
And/or there could be an automatic email warning to a developer uploading a package without the appropriate md5sum (or a false one).
Or so. Peer