diff --git a/src/common.zig b/src/common.zig
index a7de1a5ea525287e9630290eba73cfc648ef8a9a..6b5d5688d5b556d29c209604797aaf740efda914 100644
--- a/src/common.zig
+++ b/src/common.zig
@@ -85,7 +85,7 @@ pub fn collect_deps(dir: []const u8, mpath: []const u8, comptime options: Collec
                     }
                     const file_path = try std.fs.path.join(gpa, &.{pv, file_name});
                     try d.type.pull(d.path, pv);
-                    if (try u.validate_hash(try u.last(try u.split(pv, "/")), file_path)) {
+                    if (try u.validate_hash(d.version, file_path)) {
                         try std.fs.cwd().deleteFile(file_path);
                         moddir = pv;
                         break :blk;
diff --git a/src/util/dep.zig b/src/util/dep.zig
index 08c07025ade142c010aec577d7e6d2344088575e..e26ddd0ae16f36f3741949f4d7d4c5a23361b915 100644
--- a/src/util/dep.zig
+++ b/src/util/dep.zig
@@ -37,7 +37,7 @@ pub const Dep = struct {
 
     pub fn clean_path_v(self: Dep) ![]const u8 {
         if (self.type == .http and self.version.len > 0) {
-            return std.mem.join(gpa, "/", &.{"v", @tagName(self.type), self.version});
+            return std.mem.join(gpa, "/", &.{"v", @tagName(self.type), self.version[0..20]});
         }
         return std.mem.join(gpa, "/", &.{"v", try self.clean_path(), self.version});
     }