pypa/pip — Issue #468: Downloads Hashing Command Line and Requirements File
Author: dstufft
Created: 2012-03-02 01:45:25+00:00
State: open

It is my understanding that pip is supposed to check the passed in hash if it is included in either the requirements file or the command line. This appears to not be currently happening.

These all succeed:

``pip install -r requirements.txt # With a randomly typed hash ``

``pip install http://..#md5=random``