- `current_ver.dep` has an md5 hash for the ICU version ( example: https://gist.github.com/srl295/752c86f0b7aaf45e15ca492715f13e19 ) - but, ICU has switched to SHA512 - support a key `sha512` instead of `md5` for verifying the download, otherwise the integrator has to calculate their own md5 which is not verifiable.