Packages don't need to have explicit versions in files. The above example should produce:
---
name: softhsm
dependencies: []
files:
- softhsm/SoftHSMv2-*.tar.gz
...
tar xfv softhsm/SoftHSMv2-*.tar.gz
cd SoftHSMv2-*
./configure --prefix=${BOSH_INSTALL_TARGET}
make -j${CPUS} && make install
# Alternatively, to copy archive contents:
# cp -a SoftHSMv2-*/* $BOSH_INSTALL_TARGET