PURL allows adding checksum qualifier: https://github.com/package-url/purl-spec/blob/main/PURL-SPECIFICATION.rst#known-qualifiers-keyvalue-pairs It makes sense to provide checksums whenever it is possible. Let's add cheksums to PURLs of those PMs which support them.