webfactory/composer — comment on commit 399a40601819528c331d3e5120198fd2740350d5
File: src/Composer/Repository/Vcs/HgDriver.php line 148
By dsp:

this looks good. If we are pedantic we might check for ([a-f0-9]{12,40})$ instead of (.*), to make clear we are matching a abbr. sha1 hash