>+    (generate-checksums rsrc "/dev/null")

Hmm, is the "package" entry in the final file ".cargo-checksums.json" useless?
Can it be left off completely?