// package fetcher handles HTTP downloads and SHA-1 verification. package fetcher