https://docs.redroselinux.org/#/security CAR IS MADE SPECIFICALLY TO NOT HAVE THINGS SUCH AS HASH CHECKS BECAUSE IT IS A MINIMAL PACKAGE MANAGER. CAR DOES NOT NEED ANY SORT OF DEPENDENCY CHECKING, HASH CHECKS, OR ANYTHING OF THIS NATURE. IF YOU SEND A SECURITY REPORT REGARDING WHATEVER CAR SIMPLY SKIPS ON PURPOSE, WE WILL IGNORE ALL OTHER REPORTS SENT FROM YOUR EMAIL ADRESS.