@wpoely86: correct me if I am wrong, but I think all drawbacks can be reversed by combining hashes together.

Think of the case of fat easyconfigs, whereby SOURCE_TGZ corresponds to plenty of possible source files;
how do you pack together the hashes and names? and where? Ken's idea is one way out of this puzzle.

OTOH, yes, I like the 1-1 mapping of bits like the following:
``https://pypi.python.org/packages/source/P/PyMetis/PyMetis-2011.1.1.tar.gz#md5=39afeb84bc60b7d2aed020bdb7c80a80`
but:
* it does not allow for multiple hash functions combined (which brings in seriously big integrity advantages)
* does not appear too convenient direction for supporting future easyconfigs 2.0