Rerouted (regenerated, verified). Same repository and tag, but GitHub now builds the zip with different bytes, so it no longer matches the SHA-1 package.elm-lang.org recorded. The Lamdera package server serves a copy recovered from https://github.com/betagouv/elm-dsfr.
What we checked: Rebuilt with git archive from commit c5fa2ca801b8 of https://github.com/betagouv/elm-dsfr (zip prefix betagouv-elm-dsfr-c5fa2ca/, America/Los_Angeles times): the zip is byte-identical to the one package.elm-lang.org recorded, SHA-1 ea4bb71554869e10568bb080bc836dc59bc26727.
The Lamdera compiler uses this copy and prints a one-line notice saying so. elm itself fails to download this version.
Details · package.elm-lang.org's zip: https://github.com/betagouv/elm-dsfr/zipball/2.0.0/