I just meant as a solution to the fact that people can typosquat or jack a name when a package is deleted. If the developers can't get the hash right then ther

I just meant as a solution to the fact that people can typosquat or jack a name when a package is deleted. If the developers can't get the hash right then there's not much that can be done.