About package review and mismatching md5sums