In listers collecting artifacts for each package to load, add artifacts checksums, when that info is available, in parameters sent to loaders in order to check downloaded artifact integrity.
The puppet lister retrieves origins from from https://forge.puppet.com/modules Related T4519