On Fri, May 14, 2010 at 7:55 PM, Allan McRae <allan@archlinux.org> wrote:
> Can I make a request to please file a bug report about these rather than
> just fixing the md5sums. *In this case it looks like that package was
> recompressed after release without any actual changes (the file creation
> date is a month after release...), but I have seen stupid upstream people
> make a quick bugfix and replace the tarball hoping no-one has used the
> previous tarball. *Especially in the later case, it is important the
> maintainer checks why the checksum differs from what they use to build the
> package.
>
> Allan
>