Solving MRM-4. If the source pom doesn't exist, it'll check for the existence of the target pom before writing the skeleton. It'll always try to verify/patch the MD5/SHA1 for the target pom.
maven/components/trunk/sandbox/repoclean/src/main/java/org/apache/maven/tools/repoclean/digest/DigestVerifier.java