SWHID to identify software artifacts in a reliable way?

What is SWHID?

SWHID stands for Software Hash IDentifier. It is a digital, persistent and standardised intrinsic identifier for software artifacts, and it works by calculating a cryptographic hash directly from the content of the artifact itself. This content-based approach has an important consequence: the same artifact will always produce the same identifier, regardless of where it is stored or who is looking at it.

I thought this an interesting read:

1 Like