// Package downloader provides resumable byte-transfer queues. // // A completed download is still untrusted input. Callers must verify the // signed Catalog identity, exact size, SHA-256 and package signature before // handing the file to the installer. package downloader