The python download checksum is given in MD5:

In my understanding, MD5 security is completely broken and thus MD5 should no longer be used. See https://en.wikipedia.org/wiki/MD5#Security for example.

So I kindly ask you to update your checksum algorithm. For example you could provide a SHA-256 checksum instead.