Hi Tom,

thanks for reaching out!

On Wed, Aug 03, 2016 at 02:47:46PM -0500, Tom Marble wrote:
> I've been thinking about software freedom for web applications
> and wondering if anyone has thought about or done any tooling
> for "reproducible builds" for JavaScript libraries?
I guess so, because 96% (479 out of 499) of the packages on
are reproducible (in our current test framework)! :-)

5 (1.0%) packages failed to build reproducibly: twitter-bootstrap3 npm
jssip modernizr node-mocha

15 (3.0%) packages failed to build from souce: libv8-3.14
node-oauth# node-lodash node-contextify# node-postgres node-xmpp

For modernizr there's an unapplied patch to make it build reproducible
too! "#817979 modernizr: input order is not deterministic" - the bug
also has not seen a maintainer reply yet.

> Is there a way to use one of tools linked from (or elsewhere)
>   https://wiki.debian.org/ReproducibleBuilds
> to check if a JavaScript library (libjs-*) is passing the
> reproducible tests?

there are reprotest and diffoscope available in stretch and sid,
reprotest is a new tool you might want to try, and diffoscope is also
available from jessie-backports.


Attachment: signature.asc
Description: Digital signature

Pkg-javascript-devel mailing list

Reply via email to