Oh I didn't mean "random" as in "could change". In fact "random" was about the unspecified .so blob, not the http archive. > pkg-config in my experience is les

Oh I didn't mean "random" as in "could change". In fact "random" was about the unspecified .so blob, not the http archive. > pkg-config in my experience is less reproducible But this is what I mean, you only want full reproducibility in a "corporate" environment. In a FOSS desktop environment you often specifically want to use whatever the system has.