On Feb 12, 2019, at 1:27 PM, Dustin Ingram <di@python.org> wrote:

Most likely (someone more familiar with Warehouse could answer this) Warehouse will select sha256 whenever it is available, so the simple API may be just as good for you. But it's something to consider.

The simple API will always have the sha256 digest, for every file.

Important to note that while this is true for Warehouse, sha256 is not required by PEP 503 so if you specifically need sha256 you’re relying on an implementation detail of Warehouse.