Just checking, why do we need to use this directly from source?
Isn't this mirrored at FAIR/Aspirepress?
fair/bin/bundle.sh :
VERSION_DATA=$(curl -s https://api.wordpress.org/core/version-check/1.7/)
WP_ZIP_URL="https://wordpress.org/wordpress-$VERSION.zip"