if (src != null) {
            if (sourceDominant || target.getChecksumPolicy() == null) {
                target.setChecksumPolicy(src);
                target.setLocation("checksumPolicy", source.getLocation("checksumPolicy"));
            }
        }
    }

    protected void mergeDependency(
            Dependency target, Dependency source, boolean sourceDominant, Map<Object, Object> context) {

            {@code never} (only if it doesn't exist locally).
          </description>
          <type>String</type>
        </field>
        <field>
          <name>checksumPolicy</name>
          <version>4.0.0+</version>
          <description>
            What to do when verification of an artifact checksum fails. Valid values are
            {@code ignore},