pkg-to-checksum