Using roundup 0.8.2:

When using an existing tracker as a template, the db
subdirectory gets copied along with all other files and
sometimes a SHA hash gets added at the end of the file
db/db.

Because usually this will be deleted, this is not a big
problem, but I managed roundup configuration with
Mercurial (a distributed SCM), which puts its
repository files in the .hg subdirectory, and the files
.hg/undo and .hg/dirstate got corrupted by this
behaviour, too, because
#SHA: <sha-hash> was appended.