If a source url fails to download, try again at $FALLBACK_DOWNLOAD_PATH/file.name, where FALLBACK_DOWNLOAD_PATH can be overridden by the user.
Shasum verification from stdin doesn't work there, so we write to a file instead. Formatted a bit too.
See the README's in depends for documentation