<sterni>
dnkl: do you know how stable the release tar balls are? as far as I understand it these are automatically generated by whatever software codeberg is using for a specific tag, right?
<sterni>
with github we (nixpkgs) had issues in the past when they changed how their automatic archives were compressed
<sterni>
so we opted to always hash them by the extracted tarball
<dnkl>
sterni: I've never seen the hashes change, but really have no idea of how stable they are
<lanodan>
I guess it could be a good idea to use git-archive or backup the generated tarball.