Remco van 't Veer schreef op wo 29-06-2022 om 17:55 [+0200]: > +         "042xrdk7hsv4072bayz3f8ffqh61i8zlhvck10nfshllq063n877")))) This matches with a local $ guix download https://cache.ruby-lang.org/pub/ruby/2.7/ruby-2.7.6.tar.gz’ and with all the hashes from . I'll try diffing (*) it with the old tarball for ‘suspiciousness’ (e.g.: obvious malware, new bundling, ???). Greetings, Maxime (*) diffoscope can be useful, albeit a bit slow at time.