Maybe it's because it's deemed "too difficult" to change it? Years ago, I was looking into some very popular c++ library and wanted to download the archive (a

Maybe it's because it's deemed "too difficult" to change it? Years ago, I was looking into some very popular c++ library and wanted to download the archive (a tar.gz or .zip, can't remember). At that time, they hosted it on sourceforge for download. I was looking for a checksum (md5, sha1 or sha256) and found a mail in their mailing list archive where someone asked for providing said checksums on their page. The answer? It's too complicated to put creating checksums into the process and sourceforge is safe enough. (paraphrased, but that was the gist of the answer) That said, since quite some years they provide checksums for their source archives, but they kinda lost me with that answers years ago.