> You mean you don't like the full 40-character-hash? ;-)
Yes, we can avoid file names with 40-character-hash.
The only difference is the filename length instead we have:
audacity-dea351aa4820efd7ce8c2254930f942a6590472b.tar.gz
we will have a filename much shorter:
audacity-dea351a.tar.gz
The content of tar.gz is exactly the same and the rest of spec doesn't
change. This suggestion was inspired on [1].