SHA-1 is deprecated and it will be expensive to compute with the streaming NAR handler.
We haven't used this in many years (it was really only used for nix and patchelf releases).
Documents all the endpoints that can be used to retrieve data from the API without authenticating. Authentication and manipulating data with the API is not documented.
