foojayio / discoapi

The foojay discovery api (discoapi) is made to discover java packages (jre/jdk) from different distributions.
GNU General Public License v2.0
107 stars 12 forks source link

SHA256 checksum on https://api.foojay.io/disco/v3.0/ids/ to SHA256 #91

Closed ajshastri closed 7 months ago

ajshastri commented 7 months ago

Hello,

Are there plans to move the checksums available on https://api.foojay.io/disco/v3.0/ids/ to SHA256? Right now, it appears that it's SHA1.

For example,

$ curl https://api.foojay.io/disco/v3.0/ids/075329b8fc0f358f0fc3e2ce360ff552
{
  "result": [
    {
      "filename": "bellsoft-jdk11.0.21+10-windows-amd64.msi",
      "direct_download_uri": "https://github.com/bell-sw/Liberica/releases/download/11.0.21+10/bellsoft-jdk11.0.21+10-windows-amd64.msi",
      "download_site_uri": "",
      "signature_uri": "",
      "checksum_uri": "",
      "checksum": "ee23c85da3e90f226e5e52d77445719da1af965d",
      "checksum_type": "sha1"
    }
  ],
  "message": ""
}
HanSolo commented 7 months ago

Well these are the checksums from the vendors, we don’t create checksums because we only provide the links to the downloads but not the files itself