>Knowing the build was reproducible tells me nothing of value. It does. It proves that the given package was produced by the given source code. However, you ca

>Knowing the build was reproducible tells me nothing of value. It does. It proves that the given package was produced by the given source code. However, you can keep the timestamp as well! One of the goals of reproducible builds is to record values like this so it can be replayed later at a future point in time. This is done by the BUILDINFO format. https://reproducible-builds.org/docs/recording/ https://reproducible-builds.org/docs/recording/