[Slackbuilds-users] Jansson SlackBuild uses unofficial mirror

[Slack Coder]

On 4/28/21 8:49 AM, Matteo Bernardini wrote:

> it might happen that the official mirror is unreachable (for various
> reasons) so, in these cases, the download link is updated with some
> mirror locations: this is most probably what is happened with jansson
> (that was submitted with the official download link on SBo).
>
> in any case that's actually not a problem as long as the md5sum of the
> file is the same (and in this case it is).

Thanks Matteo,

>From what I understand, the md5 hash is used to check whether file has
been changed by the author and not for security purposes.  Therefore
shouldn't the official source be used when its available?