[k32]

> requiring you to specify the URL of the required packages and its hash beforehand.

...a different hash.

You see, I naively think that a checksums should not be overwritten when they doesn't match.

[soraminazuki]

That's not what I said. It's not about replacing hashes.