What is the problem you're trying to solve?
#9177 introduced MD5 hashing which breaks on some systems/machines that check for use of more secure algorithms. Switching this out for SHA256 will be in compliance with those systems.
Understand that the MD5 in this case is not used for actual security, but these machines/rules are dumb to what crypto is actually being used for.
Note: there is definitely a performance cost with using a more secure algorithm.
What solution would you like to see?
Here's an example of pnpm's solution to the same issue: unjs/jiti#375
What is the problem you're trying to solve?
#9177 introduced MD5 hashing which breaks on some systems/machines that check for use of more secure algorithms. Switching this out for SHA256 will be in compliance with those systems.
Understand that the MD5 in this case is not used for actual security, but these machines/rules are dumb to what crypto is actually being used for.
Note: there is definitely a performance cost with using a more secure algorithm.
What solution would you like to see?
Here's an example of pnpm's solution to the same issue: unjs/jiti#375