[flurpitude]

I don't see much value in published file hashes when they're hosted on the same site that hosts the files. If someone compromises the download link they're probably in a good position to update the hashes too.

[0x0539]

The purpose of the hashes isn't to prove the file hasn't been tampered with, its confirm that the file wasn't corrupted during download.

[bashinator]

Then just use checksum instead of an obsolete cryptographic hash.