What to do about github (dynamic) downloads

[John Klos <john%ziaspace.com@localhost>]

It seems that some pkgsrc packages use github for some distfiles (via 
codeload.github.com).

It appears that github generates these on the fly and has decided to change 
their method, seemingly arbitrarily, which makes checksums fail.

In the case of wip/bitcoin, the untargzipped files match the original 
repository on which the checksums were calculated, according to mtree, but 
the size of the file is now off by four bytes. The files from the actual 
Bitcoin project haven't been touched since November.

Should it be decided, whether by concensus or a decision by pkgsrc-pmc, 
that NetBSD should avoid services such as github which do this kind of 
dynamic packaging?

John Klos