zikula/zikula-standard — comment on commit fde6bf5bbfb2c9b63de49c0a71fe52748eb6bc41
File:  line 0
By drak:

Not necessarily in all cases - some modules are not released and thus not
tagged, so it just depends. For the distro we need to lock down exact
modules (once they are released of course). In general though, yes, tags
or at least exact commit hashes so it's predictable.