Although our own sources are checked out from a revision-control systems, the third-party software we depend on needs to be downloaded from their respective sites.

The plugin I'm looking for would offer a "Source Management" (or "Pre-Build") step, where I could register one (or more) sources for the same file. For example:

• https://www.sqlite.org/2019/sqlite-autoconf-3290000.tar.gz
• http://www2.sqlite.org/2019/sqlite-autoconf-3290000.tar.gz
• http://www3.sqlite.org/2019/sqlite-autoconf-3290000.tar.gz

and its digest (such as SHA256).

At build- (or at a prebuild-) time, it would check its cache and, if the file is not present there, download and verify it, and make it available to the subsequent build-steps.

I'm sure something like this, or very similar, exists already, but I cannot find it. Sonatype's Nexus seems to offer this, but only for files already found in one's Nexus repository, not for arbitrary URL's.

Any help?