Adds SHA hash to the package json URL.
This will allow for future handling
of the sha which is currently missing from
the url.