When we try to download dependencies, if there is a file at the destination already, we compare if the files are equal (recursively, if they are directories). For files, we compare their bytes. Now, these dependencies can be jars and be really large and byte-by-byte comparisons can super slow.
I think it'd be better to do a checksum.
Here's the code in question: