(1) is a good question. Form the time being I'm assuming we have already determined a hash. So I'm trying to solve (2).
Mind you (2) happens much more often and in an automated fashion, (1) can be manual for the time being.
Login to reply
Replies (1)
Bittorrent and Magnet Links?
Dreamt-up end state:
All deps are seeded right from build servers where the code is still pristine (or even from production servers, e.g. for Ruby gems if maintainers started including the tests and docs again, which they don‘t seem to be willing to do, see https://github.com/orgs/rubygems/discussions/7551#discussioncomment-8981632 )