When setting the `sha256sum` option for an `input_file` of type `project`, we usually want to set it as `norec` (otherwise it recursively gets used for all dependencies).