>> there's no way to get hashes of the archives > This is provided as a URL fragment on the URLs, as described in https://peps.python.org/pep-0503/ https://pep

>> there's no way to get hashes of the archives > This is provided as a URL fragment on the URLs, as described in https://peps.python.org/pep-0503/ https://peps.python.org/pep-0503/. Per PEP 658, the hash for the corresponding metadata files is provided in the data-dist-info-metadata (and data-core-metadata) attributes of the links. Also, this is an implementation detail, but the archives are stored in a content-addressable store with the path being based on the (hexadecimal) blake2b/256 hash of their contents.