All downloads can be verified using Apache Streams code signing.
Streams Project
0.2-incubating | zip (asc md5 sha1)