On 10 December 2015 at 23:16, Andre McCurdy <armccurdy@gmail.com> wrote:

> +SRC_URI = "https://github.com/openSUSE/libsolv/archive/${PV}.zip"

GitHub tar file archives sometimes get regenerated and the hashes
change. I'm not sure if the same can happen for zip files, but it's
probably safer to checkout a git release tag rather than trust the zip
file.

For what it's worth this was true in the past but I'm now reliably informed that the archive tarballs are generated with literally git archive, which goes to great pains to be reproducible. I would pick the tarball over the zip though.

Ross