https://bugzilla.redhat.com/show_bug.cgi?id=1112434 --- Comment #9 from Denis Fateyev <denis@xxxxxxxxxxx> --- Well, I also found it a bit unclear. I asked my sponsor, and he told me so. I think I need to investigate this topic more. PS: IMO, the only benefit to use hashes instead of tags is to bind to specific commit history point for security reasons, to prevent repository owner from modifying the history. More control over the upstream. It seems too much: most of the software still come in tarballs nowadays, and everybody's cool with that. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list package-review@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/package-review