it's too bad i only got so far as hashing the repos in this