3 ms·
No not really, any tiny open source project isn’t worth the hassle of making a reproducible build for.
by verroq 7y ago
No not really, any tiny open source project isn’t worth the hassle of making a reproducible build for.
- OJFord 7y agoWell, I look at reproducible as a scale (and incidentally, with an increase in effort as you slide along it, too). A certain amount of reproducibility - a container, pinned dependencies - gives such large reward for how easy it is to achieve that it absolutely is worth it for a tiny open source project. Worrying about the possibility of unavailable package registries and revoked signing keys, on the other hand, probably isn't. It's a trade-off. But you certainly don't need to be Google-scale for some of it to be very worth your while.