On 10/07/2017 03:20 PM, Eugene Wissner wrote: > But please consider something different than github as alternative. > GitHub doesn't guarantee that it always generates the same tarball for > the same commit/release, so the checksum can change and the downloaded > tarball looks corrupted, though it has absolutely the same content.
Ah good to know, indeed seems to be a problem for GH's archive endpoints? Would of course be a nogo for distro build receipts. https://github.com/libgit2/libgit2/issues/4343#issuecomment-328631745