[naikrovek]

> The problem is they also presented it as if it was a stable reference.

how? the docs state that the hashes of these files are not guaranteed to be stable.

the decision to generate those files on demand is a good one, provided that the behavior is documented, and it is.

others in this thread figured it out before this particular issue arose and made the necessary changes to their workflows so that their downloads would have stable hashes.