deleted by creator

Wait, they don’t affect security? Wouldn’t a hash collision mean pulling that hash from GitHub would pull wrong code? Or maybe delete code? I’d assume the hash is used as a lookup key in a database somewhere.

You also pin dependencies to specific hashes for security reasons.

What’s the benefits here? Why is the semver even bad to begin with? I’m not sure why I’d care that it’s in the hundreds. It’s a number, right?

Dates - I can just look at the release date if I want that.