Marco, Pierre Neidhardt wrote:
The hash is computed over everything: the package itself but also all its dependencies.
Pierre's right, but note that 'the package itself' here means the package 'expression' (minus mere metadata like home-page ond descriptions), not the output produced by building it. Reproducibility is important but cannot affect the hash.
Kind regards, T G-R
