Skip to content

Some release package files are missing File IDs and checksums for existing records

Within the packaging API, some package files are being displayed with no file_id when one exists. An example of this is in https://www.eclipse.org/downloads/packages/admin/release_tracker/json/2025-12%20r/all under /Eclipse IDE for PHP Developers/files/mac/64, the file_id is set to null but there are other file stats available.

        {
          "url": "http://www.eclipse.org/downloads/download.php?file=/technology/epp/downloads/release/2025-12/R/eclipse-php-2025-12-R-macosx-cocoa-x86_64.dmg",
          "size": "426MB",
          "file_id": null,
          "file_url": "https://api.eclipse.org/download/file/",
          "download_count": "657",
          "checksum": {
            "md5": null,
            "sha1": null,
            "sha512": null
          }
        }

Within the database, the file does exist, as can be seen with the URL https://api.eclipse.org/download/file?file_name=/technology/epp/downloads/release/2025-12/R/eclipse-php-2025-12-R-macosx-cocoa-x86_64.dmg. Double checking the DB directly, this file does exist and matches the api.e.o output exactly.

Additionally, none of the checksums are set, which should also be addressed as it is an important security feature. This is the case for entries with or without the file_id.