Outside of the web, I already use a tool called HashCache [0][1] to ensure that I can repeatedly fetch the right upstream source tarball for a Linux distributio

Outside of the web, I already use a tool called HashCache [0][1] to ensure that I can repeatedly fetch the right upstream source tarball for a Linux distribution I maintain. A simple script I use to download is here [2], and example usage is here [3] This has the advantage of being pretty transparent and self-maintaining. The disadvantage is that it doesn't work for things that are dynamic (duh) or not serialized. [0] https://hashcache.rkeene.org/ https://hashcache.rkeene.org/ [1] https://chiselapp.com/user/rkeene/repository/hashcache/ https://chiselapp.com/user/rkeene/repository/hashcache/ [2] https://kitcreator.rkeene.org/fossil/artifact?udc=1&ln=on&name=d546c4b48dfce807 https://kitcreator.rkeene.org/fossil/artifact?udc=1&ln=on&na... [3] https://appfs.rkeene.org/web/artifact/22239c774b50efa6 https://appfs.rkeene.org/web/artifact/22239c774b50efa6