From: josch@debian.org 
  
 Hi, 
  
 Quoting MOESSBAUER, Felix (2025-10-24 11:50:28) 
 > We further got the hint by @pkern (thanks for that!), that a name+version 
 > might not be sufficient to precisely identify a package (at least not 
 across 
 > archives). By that, we also need checksums to ensure that a package we 
 later 
 > lookup is actually the one we had at time of "scanning". 
  
 yes. This is tracked as this bug: 
  
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1072205 
  
 I have not yet heard an argument against somehow trying to make sure that 
 packages should not have the property of being unique by their 
 name/version/arch triplet. We just still lack the tooling to make sure that 
 new 
 packages do not violate this principle. 
  
 Thanks! 
  
 cheers, josch 
  
  
 P.S.: Holger made me aware of this thread via IRC and I haven't seen any 
 mention of above bug yet, so here it goes. :) 
 --==============084275849683003796=MIME-Version: 1.0 
 Content-Transfer-Encoding: 7bit 
 Content-Description: signature 
 Content-Type: application/pgp-signature; name="signature.asc"; c 
 arset="us-ascii" 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQIzBAABCgAdFiEElFhU6KL81LF4wVq58sulx4+9g+EFAmj7ogkACgkQ8sulx4+9 
 g+GqzBAAginmRjT4eccya1SHnyK7OTMKbS9iNMZgNOs+S7OAIwe/9LHlk7eiOCsu 
 Mb0Fzd1eVbee+6fEl2Xk5eQQ3MYuCXJ4GngpbO3OGq0DUodT1EE7Oz9rkeVTJjV/ 
 ZUNn9sXHqT4cxc8KsGWPRFDd27m6paOMQpjawu7nyIc0LRJ78ZM2ZXp1WFG5Kh2+ 
 Uc0E4HwbVqeR8hHR1MZp/SB5Z4Iy3mAHLpyWZGAMc6qUa0U28F2HP4n6gtiEKdf5 
 Cgxk/gt06FSX0OPUO6mZxKayEDbnC0QPgLLLTN5i9HJM70jSu7kafi/vhKodd/02 
 cMAy0ak9YOFsmxFNd30IA++rPwuQMcrIX4HAU3mDzPBNLTXyCeU9B5nXNFCP+BuY 
 XzFh5ls+KGlCtrnysE5Ms1qiiQhOx5Ieg7gbmvv2Mk42l+pWx3I1iyjrI8n/0m8P 
 yRkT0agFaqUS5X7U4vFiRWNII8C/xayJFPTtZFKVYrHMzUn8wCznv/8nbSF3jflP 
 7z7vqYjCCSwuqwkg5BvSGwsUEwthCRKTtvDE63MFBBMcqa/dyl6GBwslwp4ynVLf 
 oEwBwE6DVCVWMEOX9pohH9NgkVaA/U/mQQCW2VvhuhKniNHG91dEG44bUdltyqnh 
 g0LIUuYzKiOybY2Je0rp7AhzYfjc2ncx/Qw4UfNpFYA/cqeQlCQ= 
 =ZuNs 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)