I’m the author of checksum-dependency-plugin. The purpose of this article is to convince you to use checksums and/or PGP signatures in your build scripts.