what is shasum in composer.lock? [closed]

Question

I want to upgrade packages framework and I modified my composer.lock in but i don't understand shasum

"dist": {

            "type": "zip",

            "url": "http://www.packages/dist/packages.zip",

            "reference": "83547c3fa8a8fa95aa40b00afc5117d2d38a9f00",

            "shasum": "75c9588c293b5893c07ba49ab28e28e0eea52f25"
        },

Answer 1

The shasum is the SHA1 checksum for the downloaded ZIP to verify that it isn't corrupt or wasn't tampered with. If it's not the same as the one provided in composer.lock, it means the file that was downloaded is incomplete or incorrect, and composer will refuse to install the package.