The hash is only run for jars, do you think this scenario is still feasible?