Wrong hash when installing from package catalog
The version string gets the right hash value when installing a package from a git repository, but when getting it from the package catalog the reported git version is wrong and doesn't exist. When not installed from a git repository, we use the checksum value reported by the package server, which we believed was the git hash for packages with a git source. That doesn't seem to be the case.