&gt; For various reasons (at least, metadata and the .git folder) it&#x27;s very unlikely that you&#x27;d get the exact same checksum for the entire zip...<p>This sounds entirely wrong to me. Checksums are used all the time to verify the integrity of archives.