[wp-meta] [Making WordPress.org] #3192: Provide an API endpoint to fetch plugin checksums

Making WordPress.org noreply at wordpress.org
Thu Nov 9 15:48:20 UTC 2017

#3192: Provide an API endpoint to fetch plugin checksums
 Reporter:  schlessera        |       Owner:  dd32
     Type:  enhancement       |      Status:  accepted
 Priority:  normal            |   Milestone:
Component:  Plugin Directory  |  Resolution:
 Keywords:                    |

Comment (by schlessera):

 @dd32 The way the `md5` and `sha256` are stored now duplicates all of the
 duplicate for every single type of hash we add (so x2 now, but might be
 even more later down the road).

 That's why we opted to turn around the schema, so that files are
 enumerated first, and for every file, you have the md5 hashes and then the
 sha256 hashes:

     "plugin": "test-plugin-3",
     "version": "1.1.2-20160302",
     "source": [
     "zip": [
     "files": [
         "NEW-FILE": {
             "md5": "d41d8cd98f00b204e9800998ecf8427e",
         "plugin.php": {
             "md5": [
             "sha256": [
         "README.md": {
             "md5": "11995b9377c5bc4afcd46fb49f9bf887",

 This multiplies the `md5` and `sha256` strings instead, but as the
 filenames will contain paths and can potentially be very long, this is

Ticket URL: <https://meta.trac.wordpress.org/ticket/3192#comment:15>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org

More information about the wp-meta mailing list