3 ms·
would you even trust the dependency if it's not reproducible? if it is reproducible, then the package manager is sufficient to generate a sbom
by arccy 2y ago
would you even trust the dependency if it's not reproducible? if it is reproducible, then the package manager is sufficient to generate a sbom