I'm committing some fixes and regression tests.
I've really only implemented validation logic for the case where the distribution points to a local folder.
So the case where it points to a http location still is not being validated.
But I think it addresses the concerns raised in
Closing this issue.