Is your feature request related to a problem? Please describe.
Developers have to go out of their way to make old versions available on things like Pastebin, so they frequently do not preserve them.
Describe the solution you'd like
At install time, if version is missing we should hash the result of each file downloaded from these platforms and store it. When updating a package using unicorn.remote, we should download each file and check if the hashes match.
Describe alternatives you've considered
We could include hashes in the package tables, but that would require continuously monitoring upstream.
Is your feature request related to a problem? Please describe.
Developers have to go out of their way to make old versions available on things like Pastebin, so they frequently do not preserve them.
Describe the solution you'd like
At install time, if
versionis missing we should hash the result of each file downloaded from these platforms and store it. When updating a package usingunicorn.remote, we should download each file and check if the hashes match.Describe alternatives you've considered
We could include hashes in the package tables, but that would require continuously monitoring upstream.