> But most importantly, all builds are completely reproducible. This is only true if the commands that the recipe executes are reproducible. If someone's pull

> But most importantly, all builds are completely reproducible. This is only true if the commands that the recipe executes are reproducible. If someone's pulling packages from PyPi or C[PR]AN or ... w/out locking the versions, all bets are off. This is one of my biggest beefs with many containerization sales pitches...