Source: apg Followup-For: Bug #1102760 Control: close -1 Version 2.2.3.dfsg.1-7 included an mtime-clamping build-reproducibility fixup, and from that version onwards, the tests.reproducible-builds.org Debian package testing displays success for apg.
That surprises me a little, because I think that the numeric-id fixup in the linked merge request here is also required when varying user/group names in the build environment -- and a fix for _that_ arrived from 2.2.3.dfsg-1.8 - but I do think that the package now builds reproducibly.

