switch to sha256 checksums

* upgrade some broken packages
* correct some broken urls/checksums
* use secure urls where possible
* use stable url for ncurses
* some whitespace fixes

Remaining md5sums either didn't download or
didn't pass checksum tests.

jsoncpp/PKGBUILD

@@ -14,8 +14,8 @@ makedepends=("gcc"
 options=('staticlibs' '!strip' '!buildflags')
 source=("https://github.com/open-source-parsers/jsoncpp/archive/$pkgver.tar.gz"
         "snprintf-newlib.patch")
-md5sums=('5a62da8b5c5b0e46a0e782e7363aee3d'
-         '34829bc0fc597234537f376eb2762a6d')
+sha256sums=('c40e5a2583df633b904525305bda40b622d9971fee1ece7ce48ca723a4907d36'
+            'cb86260df5196abd1c3bba83db046fe00b7143784a6f83f32ca98c95899ac98b')
 
 prepare() {
   cd "${srcdir}/${pkgname}-$pkgver"