{"_id":"reproduce","_rev":"21-145a3bc559f92f831e47c776e25cf0e9","name":"reproduce","dist-tags":{"latest":"1.2.0"},"versions":{"0.0.0":{"name":"reproduce","version":"0.0.0","author":{"name":"siddharthkp"},"license":"MIT","_id":"reproduce@0.0.0","maintainers":[{"name":"siddharthkp","email":"siddharth.kshetrapal@gmail.com"}],"dist":{"shasum":"02c5bbad887d2bb7a276d9d56ae3f4982ddfd8c1","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-0.0.0.tgz","integrity":"sha512-F6lSQG594z1Ffpz+9R8mjqrYzxJCl09K2xwdoFVbdRL5sykpgYScXBsNYBRfDqlmv/EXt2JAD5fnLst3K+jSrg==","signatures":[{"sig":"MEQCIDsu7iYHCSn1gI6PxWbVL1bYIswSk+ziXGnKjkFCM1txAiByh+1BCpcTN/0g6rzOeU7bOZI5FePNkyitKXzuMq6vpQ==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}]},"_from":".","_shasum":"02c5bbad887d2bb7a276d9d56ae3f4982ddfd8c1","scripts":{},"_npmUser":{"name":"siddharthkp","email":"siddharth.kshetrapal@gmail.com"},"_npmVersion":"3.10.7","description":"--","directories":{},"_nodeVersion":"6.2.2","_npmOperationalInternal":{"tmp":"tmp/reproduce-0.0.0.tgz_1484210792178_0.28582417918369174","host":"packages-12-west.internal.npmjs.com"}},"0.0.1-pre.1":{"name":"reproduce","version":"0.0.1-pre.1","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@0.0.1-pre.1","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"dist":{"shasum":"d6823caa08b4c71dac016a4b49117faebac28acd","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-0.0.1-pre.1.tgz","fileCount":5,"integrity":"sha512-eS9lDheh3eaZaMm+ZO3eFXzebcKxDkBf5eu3WAgS4W1KreRAqk3egLdyAVhDe1HCM3TXrcjxuPZwYfh9uXJtcQ==","signatures":[{"sig":"MEUCICPRU0r8W4CWZqPnnVdmouvD4MUuTCNLM3wfNeOoW/DRAiEAkwV6+ehdo6DUbBDpxQIll1V/Hyq3UttgKoop0CXVtXk=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":14081},"type":"module","engines":{"node":">=22.14.0"},"gitHead":"db8005bbe3319a24d3af4d87a4295ee34b168b4e","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"![reproduce](https://github.com/user-attachments/assets/cf9f4d5d-b78e-4fda-94d3-34a9271f012e)","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_0.0.1-pre.1_1740576997517_0.3961041097680722","host":"s3://npm-registry-packages-npm-production"}},"0.0.1":{"name":"reproduce","version":"0.0.1","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@0.0.1","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"bin":{"reproduce":"cli.js"},"dist":{"shasum":"7d6cc0e96b232d683e3ec1cef711ffb32e4592c1","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-0.0.1.tgz","fileCount":5,"integrity":"sha512-YTf5hcWBElUarrqFfpjWSHPQcYLVSX/0GJh7soFr3546nzMCb9F4o3HYlVNLNlU8WA0UOU3eldh1F5GsnBY8/w==","signatures":[{"sig":"MEQCIBhbwhk+/paKTDN2/Zwpwh/IXuND/73W34bAEcBQasP9AiAWvZwVF8nSIlthDFjhAUeby8M/p0s/4DWiIw8CRFR+DQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":15747},"type":"module","engines":{"node":">=22.14.0"},"gitHead":"a165af8abfebc177765c8accaf7df451cf048f83","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"![reproduce](https://github.com/user-attachments/assets/cf9f4d5d-b78e-4fda-94d3-34a9271f012e)","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_0.0.1_1740579832853_0.40160852540138037","host":"s3://npm-registry-packages-npm-production"}},"0.0.2":{"name":"reproduce","version":"0.0.2","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@0.0.2","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"bin":{"reproduce":"cli.js"},"dist":{"shasum":"acdeb08e2fadad74524fd28e96a23f1ca7931c93","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-0.0.2.tgz","fileCount":5,"integrity":"sha512-vRdgMMi+dUIp4hgBDbhZ5w4NsMQZFG49049iy3pYuHuPlHYnbGyjETr7HC/mLLWEQPKE44fAjT+rbLu7mPViQg==","signatures":[{"sig":"MEUCIGOimmvEjDD2CJnQUNn11BwaUq1DgV/i1F5TSvq6La7UAiEAkDbU7zX+TOErN91rI9pvZk02k7cDSebx6soE74erGlU=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":15703},"type":"module","gitHead":"f94403ed0da8f976a4fb0e6eb9e4c1e0a9fc363a","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"![reproduce](https://github.com/user-attachments/assets/cf9f4d5d-b78e-4fda-94d3-34a9271f012e)","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_0.0.2_1740580721423_0.5595000449037073","host":"s3://npm-registry-packages-npm-production"}},"0.0.3":{"name":"reproduce","version":"0.0.3","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@0.0.3","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"bin":{"reproduce":"cli.js"},"dist":{"shasum":"c92512d432da9669106b3366c348b721fbc19bb7","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-0.0.3.tgz","fileCount":5,"integrity":"sha512-LTDGau/OnSGTTWOm7iQXM9cv2R5w/Bhw6CtK80mnk39RNSAEgAlaY4T+Sjp272EE6MrNadBlfYvKuTqgB//CIQ==","signatures":[{"sig":"MEQCICuMV+j0sxJZNqj7DyrwuYspNkwFHkf9cXKByA/KvH9bAiAoYwm8eZy/sQgWqRjEiy9NmjngZ0xz/ulfjQOwRcBjUw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":15727},"type":"module","gitHead":"3937f9ea879e3edde81721a9612bb92cffcee52f","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"\"reproducible","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_0.0.3_1740580838749_0.3567212651724936","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"reproduce","version":"1.0.0","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.0.0","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"bin":{"reproduce":"cli.js"},"dist":{"shasum":"e304e98cc5113b82425df115d229396261623c2e","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.0.0.tgz","fileCount":5,"integrity":"sha512-dJNqz1qET6lqn5jdQCOiJBr2v5WiymV4Ugjzbaj5Tt498VNpYEnIfPR7W6bsm0wvBzLmWXtQX4QMDHI2qpaKZA==","signatures":[{"sig":"MEQCIBOSluAB3XnApB2+dY7cOFonUjbd+r5afFg851mi4Y3IAiBm076hpvjSNKNSu3wqGReykR7FbwNgOfCMQrakZTfzhg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":15760},"type":"module","gitHead":"098dc72fcaa8226beb3f20b9835130df77e10035","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"\"reproducible","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.0.0_1740580944275_0.8324293575659039","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"reproduce","version":"1.0.1","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.0.1","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"bin":{"reproduce":"cli.js"},"dist":{"shasum":"cf1200ab3842b09f54329280ebab2ac7d0a4db39","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.0.1.tgz","fileCount":5,"integrity":"sha512-ame2rGuD44P5NBd7SPzI2hs7VR7GR1QAXqMc8Uh24H5YlH+uOdQf2KRJVdIs6qLf4FdbhpNuE8x/0MMO4q8ymg==","signatures":[{"sig":"MEYCIQD38lmhB4/bXVI+OM/ybSDdo0eyHExZBL1G0sn9luqCUAIhANwl4nuCJQKCxbfinGTK70b2VDKRjexh03bjsphIMBwP","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":16040},"type":"module","gitHead":"6efb9e08e0ddaa0706e2f922208dbae792932a83","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"_npmVersion":"11.1.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.0.1_1740581106050_0.3756672806507222","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"reproduce","version":"1.0.2","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.0.2","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"cli.js"},"dist":{"shasum":"958be838cfc436c3ef12be22f63a78a0244bec61","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.0.2.tgz","fileCount":5,"integrity":"sha512-E9eg0VeC2Ng/LwjNCZ1jWC7jR8kzT65zkhadpEWO9tWOMEm/06lZuT6UKAUAJzdHlQxEGNyPwivcNdtjk9lQhQ==","signatures":[{"sig":"MEQCIDcy0HUYQn3Xv6GQXmfUtHdM1PWX8tAzm0+bYHLZASe4AiByYNruXMNPsFegIANPaz8wASwqcopQKjKeJGfBBS3ddg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":16135},"type":"module","gitHead":"42b99a07774b9f4c92487533654709ea1ae978bf","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.1.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.0.2_1740581248572_0.44474171436709553","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"name":"reproduce","version":"1.0.3","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.0.3","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"cli.js"},"dist":{"shasum":"8ad879ba1ae816385b1d8f74d7cd611af30a4896","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.0.3.tgz","fileCount":5,"integrity":"sha512-b4v5us7VaMI9dMBB7aKXZ3rciGkbyuCRgU4gVkdpc5bDJmppGWXmnuUEPHAmdhTP25AikMcGS2o8kQAOrNZCtA==","signatures":[{"sig":"MEQCIBPnwEpBbeW/R88fqAFCzCXDoPA/r1YFj0Mc3nyaP8uWAiA0me2KxeFl6SPUkjjnsUlT5jad1gzC3zSQhZOxETIMUw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":16196},"type":"module","gitHead":"8e23b5067dfcc272ae1915f1d15ad4c9f3a2257d","scripts":{},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.1.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"_hasShrinkwrap":false,"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.0.3_1740593056048_0.23098878187648997","host":"s3://npm-registry-packages-npm-production"}},"1.1.1":{"name":"reproduce","version":"1.1.1","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.1.1","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"},{"name":"isaacs","email":"i@izs.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"dist/cli.js"},"dist":{"shasum":"b424b8470aec0184ce0c60110b496ed8c47e9661","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.1.1.tgz","fileCount":23,"integrity":"sha512-Zyp48UU9cKGtAIo5xQzacT76uQNUtdOu/b5HnJmqFBeG4cCXLo68zx9GkFKPRapPnBg2XW4qUG2fE8Y/EXvxCQ==","signatures":[{"sig":"MEUCIBdrJ4JkXUsx42SELNDIoh+b+ajWXdywV+vcGTb0DNcaAiEArFkKPH3X3G+Q28Q782B27gwuUNoE1Q27rgpgSUy59S8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46001},"type":"module","gitHead":"126fc081fc7516b775534e1c6428ec5a465f3177","scripts":{"dev":"tsc --watch","lint":"eslint .","test":"npm run lint &&node --no-warnings test/run.js","build":"tsc","start":"node dist/cli.js","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.2.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"publishConfig":{"engines":{}},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0","@types/node":"^22.13.9","@typescript-eslint/parser":"^6.21.0","@typescript-eslint/eslint-plugin":"^6.21.0"},"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.1.1_1742222442958_0.26179653162640015","host":"s3://npm-registry-packages-npm-production"}},"1.1.2":{"name":"reproduce","version":"1.1.2","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.1.2","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"},{"name":"isaacs","email":"i@izs.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"dist/cli.js"},"dist":{"shasum":"c8cac0702fdcb0414facde86fa6cdc49597c506b","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.1.2.tgz","fileCount":23,"integrity":"sha512-ISX66vWsmgpHwBli1Kw64hwR8z2wytk9CBmjn6vZFmZ+7lVzAtDl/nIwaMB//jID8mCuTRVETxfgPGl/ldzMhQ==","signatures":[{"sig":"MEYCIQD46Ktb08vTTjyAr/uhXUBYofWd+FTHwRSZngohE5zMwwIhAMp2ugGVzIh7+J3TdmiX5YzCQd3faljl2prSev+tVFm7","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":46073},"main":"./dist/cli.js","type":"module","types":"./dist/cli.d.ts","exports":{".":"./dist/cli.js"},"gitHead":"8160a6b28e4b265bb6a856caa355e2b1e33a9a22","scripts":{"dev":"tsc --watch","lint":"eslint .","test":"npm run lint &&node --no-warnings test/run.js","build":"tsc","start":"node dist/cli.js","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.2.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"publishConfig":{"engines":{}},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0","@types/node":"^22.13.9","@typescript-eslint/parser":"^6.21.0","@typescript-eslint/eslint-plugin":"^6.21.0"},"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.1.2_1742253469614_0.5802643985200058","host":"s3://npm-registry-packages-npm-production"}},"1.1.3":{"name":"reproduce","version":"1.1.3","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.1.3","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"},{"name":"isaacs","email":"i@izs.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"dist/cli.js"},"dist":{"shasum":"24c152194754a4f49c511853e8c209648ec4b5f8","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.1.3.tgz","fileCount":23,"integrity":"sha512-AcD1KDWhe32h9uCgJOKQE54Q40lnZp86QiGDuGaEy49WcvM8kwAcF+36trsDGyN6N6gPPII2kiz0+F/K0l1Bog==","signatures":[{"sig":"MEYCIQDgky4czRIPYJcew3oyMtv+kzrSFV7uF3viyiWI6AG5ugIhAKOSj4p2TEr6u4LXBi3sFLfHmLGjvc6vtjTThdauhJi1","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":45890},"main":"./dist/cli.js","type":"module","types":"./dist/cli.d.ts","exports":{".":"./dist/cli.js"},"gitHead":"c67f95235f87822bc1fdd128f67196cd9730802b","scripts":{"dev":"tsc --watch","lint":"eslint .","test":"npm run lint &&node --no-warnings test/run.js","build":"tsc","start":"node dist/cli.js","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.2.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"publishConfig":{"engines":{}},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0","@types/node":"^22.13.9","@typescript-eslint/parser":"^6.21.0","@typescript-eslint/eslint-plugin":"^6.21.0"},"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.1.3_1742253965809_0.6304413810773637","host":"s3://npm-registry-packages-npm-production"}},"1.1.4":{"name":"reproduce","version":"1.1.4","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.1.4","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"},{"name":"isaacs","email":"i@izs.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"dist/cli.js"},"dist":{"shasum":"b0c0889424125adde18f736e63d87bb688a7db85","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.1.4.tgz","fileCount":23,"integrity":"sha512-jp7Wj8+3MRE1sbg0OOmuds2fKwM4c04ErbQ4krRq1BMXmMxaxLchMRZmdaZgH2Ro48ej7phMZIIWIll0x/lHqA==","signatures":[{"sig":"MEUCIQCGCT2Gpzh9I4H0lA3FsJsaDg4SVDvTefiiV7gvGLR0AAIgEYt+wSj76Jr0lNwYpTU5FPZFW+fAuUPgsFXnPZnSS5w=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":45934},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","exports":{".":"./dist/index.js","./package.json":"./package.json"},"gitHead":"ec988e739dfa49c4b3206e6ad779ab705566cb97","scripts":{"dev":"tsc --watch","lint":"eslint .","test":"npm run lint &&node --no-warnings test/run.js","build":"tsc","start":"node dist/cli.js","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.2.0","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"22.14.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"publishConfig":{"engines":{}},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0","@types/node":"^22.13.9","@typescript-eslint/parser":"^6.21.0","@typescript-eslint/eslint-plugin":"^6.21.0"},"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.1.4_1742254530383_0.8535343685746297","host":"s3://npm-registry-packages-npm-production"}},"1.1.5":{"name":"reproduce","version":"1.1.5","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","_id":"reproduce@1.1.5","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"},{"name":"isaacs","email":"i@izs.me"}],"homepage":"https://github.com/vltpkg/reproduce#readme","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"bin":{"reproduce":"dist/cli.js"},"dist":{"shasum":"d1f27f518e5a366746aa09ae0fca655c182d1668","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.1.5.tgz","fileCount":27,"integrity":"sha512-f9TXdHEU9wliF3KBZWHdbxiq/GE1+BzSPIn9PYXixUKGRvPs9D+3rXIPOjoGDw0P6bvE3bnq3zmd32ikeBZEYg==","signatures":[{"sig":"MEYCIQCSzlrLS3Y4XEVYoVjRNIQ9ew9fFv5hwxUQoD/IGdjRYwIhAPDEFEq7pJf7j/SWChuX6qHgl+gHHJMt5QHib+k1rT5W","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":68074},"main":"./dist/index.js","type":"module","types":"./dist/index.d.ts","exports":{".":"./dist/index.js","./package.json":"./package.json"},"gitHead":"a9f3a17d311f5af4259e5cb287598b9b86a185f8","scripts":{"dev":"tsc --watch","lint":"eslint .","test":"npm run lint &&node --no-warnings test/run.js","build":"tsc","start":"node dist/cli.js","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"repository":{"url":"git+https://github.com/vltpkg/reproduce.git","type":"git"},"_npmVersion":"11.5.2","description":"Validate a package's reproducibility against it's published repository information.","directories":{},"_nodeVersion":"24.1.0","dependencies":{"minargs":"^2.0.3","@vltpkg/spec":"^0.0.0-0.1730724342581","@vltpkg/package-info":"^0.0.0-0.1730724342581"},"publishConfig":{"engines":{}},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0","@types/node":"^22.13.9","@typescript-eslint/parser":"^6.21.0","@typescript-eslint/eslint-plugin":"^6.21.0"},"peerDependencies":{"npm":"^11.1.0"},"_npmOperationalInternal":{"tmp":"tmp/reproduce_1.1.5_1757893825899_0.11411870607938779","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"reproduce","description":"Validate a package's reproducibility against it's published repository information.","version":"1.2.0","license":"MIT","author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"bin":{"reproduce":"dist/cli.js"},"main":"./dist/index.js","exports":{".":"./dist/index.js","./package.json":"./package.json"},"repository":{"type":"git","url":"git+https://github.com/vltpkg/reproduce.git"},"type":"module","scripts":{"build":"tsc","start":"node dist/cli.js","dev":"tsc --watch","test":"npm run lint &&node --no-warnings test/run.js","lint":"eslint .","lint:fix":"eslint . --fix","preppack":"npm install && npm run build && npm run test"},"publishConfig":{"engines":{}},"dependencies":{"@vltpkg/package-info":"^0.0.0-0.1730724342581","@vltpkg/spec":"^0.0.0-0.1730724342581","minargs":"^2.0.3"},"devDependencies":{"@types/node":"^22.13.9","@typescript-eslint/eslint-plugin":"^6.21.0","@typescript-eslint/parser":"^6.21.0","eslint":"^8.56.0","p-queue":"^8.0.1","typescript":"^5.3.0"},"peerDependencies":{"npm":"^11.1.0"},"keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"_id":"reproduce@1.2.0","gitHead":"856cd1d4071d6bbd059ad5f55e9ce98518ed1371","types":"./dist/index.d.ts","bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"homepage":"https://github.com/vltpkg/reproduce#readme","_nodeVersion":"24.1.0","_npmVersion":"11.5.2","dist":{"integrity":"sha512-ed6aYzKwDWNUsKmWfd6G/LXc4EEiPLBlmmKbM81r3zxV8h/q1GdaZW6sxGzZ7GszXrW0+7ssa2XJ/+RWaff2FA==","shasum":"04ff0f2f484fcfb3561a21166a052e6aeb7b3a7b","tarball":"https://registry.npmjs.org/reproduce/-/reproduce-1.2.0.tgz","fileCount":27,"unpackedSize":68734,"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIHiFfLqC9/UdNEf933Ceo1dxyAcHSAN/lkGYrhc7EKPDAiBMYJqpK2zmZE3vjkYkweKvBn7qIJlC/x+72iSjW1csEQ=="}]},"_npmUser":{"name":"darcyclarke","email":"darcy@darcyclarke.me"},"directories":{},"maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/reproduce_1.2.0_1757894373769_0.5878790529388926"},"_hasShrinkwrap":false}},"time":{"created":"2017-01-12T08:46:32.400Z","modified":"2025-09-14T23:59:34.151Z","0.0.0":"2017-01-12T08:46:32.400Z","0.0.1-pre.1":"2025-02-26T13:36:37.690Z","0.0.1":"2025-02-26T14:23:53.081Z","0.0.2":"2025-02-26T14:38:41.586Z","0.0.3":"2025-02-26T14:40:38.981Z","1.0.0":"2025-02-26T14:42:24.494Z","1.0.1":"2025-02-26T14:45:06.248Z","1.0.2":"2025-02-26T14:47:28.725Z","1.0.3":"2025-02-26T18:04:16.248Z","1.1.1":"2025-03-17T14:40:43.116Z","1.1.2":"2025-03-17T23:17:49.795Z","1.1.3":"2025-03-17T23:26:06.033Z","1.1.4":"2025-03-17T23:35:30.560Z","1.1.5":"2025-09-14T23:50:26.087Z","1.2.0":"2025-09-14T23:59:33.947Z"},"bugs":{"url":"https://github.com/vltpkg/reproduce/issues"},"author":{"name":"vlt technology inc.","email":"ops@vlt.sh"},"license":"MIT","homepage":"https://github.com/vltpkg/reproduce#readme","keywords":["reproducible","provenance","vlt","npm","package","info","spec","security","audit","dependency","dependencies","dependency-audit"],"repository":{"type":"git","url":"git+https://github.com/vltpkg/reproduce.git"},"description":"Validate a package's reproducibility against it's published repository information.","maintainers":[{"name":"darcyclarke","email":"darcy@darcyclarke.me"},{"name":"lukekarrys","email":"luke@lukekarrys.com"}],"readme":"\"reproducible\n\n# `reproduce`\n\n[![Test](https://github.com/vltpkg/reproduce/actions/workflows/test.yml/badge.svg)](https://github.com/vltpkg/reproduce/actions/workflows/test.yml)\n\nCan we reproduce a package with the _\"origin\"_ information provided?\n\n**[Features](#features)**\n·\n**[How It Works](#how-it-works)**\n·\n**[Configuration](#configuration)**\n·\n**[Strategies](#strategies)**\n·\n**[Usage](#usage)**\n·\n**[Insights](#insights)**\n·\n**[FAQs](#faqs)**\n\n### Features\n\n- ✅ determines whether or not a package can be reproduced from it's referenced repository metadata (ie. `repository`, `repository.type`, `repository.url`, `repository.directory` & `gitHead`)\n- 🔍 validates `repository` information against `package.json` if the package referenced lives on a registry (will fallback to `package.json` inside the tarball if the package is not in a registry)\n - 🔀 mismatching `repository` information is considered [_\"manifest confusion\"_](https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem) & will return `false` for _\"reproducibility\"_\n- 🗄️ provides persistent caching of results\n- 🔄 currently only supports `npm` as a `\"strategy\"` but will expand to support other package managers in the future\n\n#### How It Works\n\n1. ⬇️ fetches the package & any corresponding metadata\n2. 📂 if available, does a clone/checkout of the corresponding source `repository`\n3. 🔄 attempts to prepare & pack the source repository using one or more [strategies](#strategies)\n4. 🔍 validates the integrity value of `#3` against the package fetched in `#1`\n5. 📄 returns results and caches them for future use\n\n### Usage\n\n```bash\n$ npm i -g reproduce # install globally\n$ reproduce axios\n```\n\n```bash\n$ npx reproduce axios # execute with npx\n```\n\n```js\nimport reproduce from 'reproduce'\n\n// Basic usage\nconst result = await reproduce('package-name')\n\n// With custom configuration\nconst result = await reproduce('package-name', {\n cache: {},\n cacheDir: './custom-cache',\n cacheFile: 'custom-cache.json'\n})\n```\n\n\n#### CLI\n\n```bash\nreproduce tsc # exit code 0 - reproducible\n```\n\n```bash\nreproduce esbuild # exit code 1 - not reproducible\n```\n\n```bash\nreproduce axios --json # exit code 1 - not reproducible\n{\n \"reproduceVersion\": \"0.0.1-pre.1\",\n \"timestamp\": \"2025-02-25T10:40:24.947Z\",\n \"os\": \"darwin\",\n \"arch\": \"arm64\",\n \"strategy\": \"npm:10.9.1\",\n \"reproduced\": false,\n \"package\": {\n \"spec\": \"axios@latest\",\n \"name\": \"axios\",\n \"version\": \"1.2.3\",\n \"location\": \"https://registry.npmjs.org/axios/-/axios-1.7.9.tgz\",\n \"integrity\": \"sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==\"\n },\n \"source\": {\n \"spec\": \"github:axios/axios#b2cb45d5a533a5465c99559b16987e4d5fc08cbc\",\n \"name\": \"axios\",\n \"version\": \"1.2.3\",\n \"location\": \"git+https://github.com/axios/axios.git\",\n \"integrity\": \"null\"\n },\n \"diff\": \"...\"\n}\n```\n\n```bash\nreproduce axios --force # force revalidation, bypass cache\n```\n\n##### CLI Options\n\n| Option | Short | Description |\n|--------|-------|-------------|\n| `--strategy` | `-s` | Choose a strategy (default: \"npm\") |\n| `--json` | `-j` | Output result as JSON |\n| `--force` | `-f` | Force revalidation, bypass cache |\n| `--help` | `-h` | Print usage information |\n\n```bash\nreproduce require --json # exit code 0 - reproducible\n{\n \"reproduceVersion\": \"0.0.1-pre.1\",\n \"timestamp\": \"2025-02-25T10:22:09.303Z\",\n \"os\": \"darwin\",\n \"arch\": \"arm64\",\n \"strategy\": \"npm:10.9.1\",\n \"reproduced\": true,\n \"package\": {\n \"spec\": \"sleepover@latest\",\n \"version\": \"1.2.3\",\n \"location\": \"https://registry.npmjs.org/sleepover/-/sleepover-1.2.3.tgz\",\n \"integrity\": \"sha512-yNAIVUqbQifyy5+hfzAzK2Zt21wXjwXqPyWLu+tOvhOcYKG2ffUiSoBXwt/yo4KJ51IcJfUS0Uq0ktOoMWy9Yw==\"\n },\n \"source\": {\n \"spec\": \"github:darcyclarke/sleepover#f2586e91b3faf085583c23ed6e00819916e85c28\",\n \"version\": \"1.2.3\",\n \"location\": \"git+ssh://git@github.com/darcyclarke/sleepover.git\",\n \"integrity\": \"sha512-yNAIVUqbQifyy5+hfzAzK2Zt21wXjwXqPyWLu+tOvhOcYKG2ffUiSoBXwt/yo4KJ51IcJfUS0Uq0ktOoMWy9Yw==\"\n }\n}\n```\n\n### Configuration\n\nThe `reproduce` function accepts an options object with the following configuration:\n\n```js\n{\n cache: {}, // Optional in-memory cache object (persisted to disk if provided)\n cacheDir: '~/.cache/reproduce', // OS-specific cache directory\n cacheFile: 'cache.json', // Cache file name\n strategy: 'npm' // Strategy to use\n}\n```\n\n#### Cache Locations\n\nThe cache is stored in OS-specific locations:\n- macOS: `~/Library/Caches/reproduce/`\n- Windows: `%LOCALAPPDATA%/reproduce/Cache/`\n- Linux: `$XDG_CACHE_HOME/reproduce/` or `~/.cache/reproduce/`\n\n### Strategies\n\nA strategy is a set of operations to take to recreate a package. Strategies should represent common patterns for preparing/building/packing packages to cast wide nets. If a set successfully recreates a package then its ID will be stored inside the returned metadata.\n\n| Name | UUID | Description |\n| --- | --- |\n| `npm` `npm:` | clones, checks out ref, installs deps & then runs pack |\n\n> Note: one-off/bespoke or complex configurations will not be supported but we will continue to add more strategies as we find common patterns.\n\n### Insights\n\n#### Top 5,000 High Impact Packages\n\n> Note: \"High Impact\" packages are defined as having >=1M downloads per week and/or >=500 dependants. This list was originally generated [here](http://github.com/nodejs/package-maintenance/issues/569#issuecomment-1739532894). This test was run on 2025-02-26.\n\n- **5.78%** (289) are **reproducible**\n- **3.72%** (186) have **provenance**\n\n
\nList of reproducible packages\n
\nsemver\ntslib\nlru-cache\nreadable-stream\nansi-regex\ncommander\nminimatch\nyallist\nglob\nstring-width\nfs-extra\nemoji-regex\nwhich\nexeca\nws\nminipass\ncross-spawn\nmicromatch\nwhatwg-url\ntr46\nmime\npath-type\nloader-utils\nwrite-file-atomic\ncallsites\nini\nbinary-extensions\nis-binary-path\npump\nread-pkg\nnormalize-package-data\nopen\njson-parse-even-better-errors\ncli-cursor\nyocto-queue\nrestore-cursor\nterser\nfastq\nsax\nip\nlog-symbols\nreusify\nssri\nnopt\nnormalize-url\n@eslint/eslintrc\n@humanwhocodes/config-array\nmdn-data\nmute-stream\nimport-local\ngauge\nspdx-license-ids\ntest-exclude\nregjsparser\nspdx-exceptions\nis-unicode-supported\nis-ci\nurl\nsource-map-js\nregenerate-unicode-properties\nminizlib\nunicode-match-property-value-ecmascript\ndata-urls\nhtml-encoding-sniffer\nwhatwg-mimetype\ncli-spinners\nxml-name-validator\nabbrev\ntype\nunicode-canonical-property-names-ecmascript\nunique-slug\nunique-filename\nw3c-xmlserializer\ndot-prop\ncamelcase-keys\n@sindresorhus/is\nforeground-child\n@npmcli/fs\nstream-shift\nlog-update\nmake-fetch-happen\nboxen\ndel\ntar-fs\n@hapi/hoek\np-retry\nhas-ansi\nminipass-fetch\ncli-boxes\nagentkeepalive\nsort-keys\nsafe-stable-stringify\nnode-gyp-build\nnpm-normalize-package-bin\nbuiltins\naws-sdk\nelliptic\nnpm-package-arg\nvalidate-npm-package-name\nes5-ext\nes6-symbol\nstrnum\npath-scurry\nregistry-auth-token\ncrypto-browserify\nd\nhtml-tags\nmoment-timezone\nnpm-bundled\nignore-walk\nnpm-packlist\ndevtools-protocol\nget-port\npackage-json\np-defer\np-event\nlatest-version\ndefault-browser-id\nnpm-registry-fetch\ncompress-commons\nzip-stream\nlcid\nfilter-obj\nnpm-pick-manifest\npacote\nread\nrequire-in-the-middle\nnpm-install-checks\nthrottleit\n@npmcli/run-script\ntouch\nread-package-json-fast\n@npmcli/promise-spawn\n@npmcli/node-gyp\n@npmcli/git\nprebuild-install\nstore2\n@npmcli/installed-package-contents\nproc-log\npostgres-interval\nxregexp\nwebpack-hot-middleware\nis-what\ncopy-anything\nset-cookie-parser\np-filter\nfast-redact\nknown-css-properties\nremark-slug\nis-builtin-module\nremark-external-links\nis-text-path\ntext-extensions\nmemoizee\ntimers-ext\nspawn-command\nfind-versions\ndebounce\nxmlhttprequest-ssl\npino-abstract-transport\nrun-applescript\nuse-callback-ref\nuse-sidecar\nestree-to-babel\ndefault-browser\nbundle-name\npretty-ms\npostcss-normalize\ncli-color\nmacos-release\nwindows-release\nremark-footnotes\nimport-in-the-middle\nread-cmd-shim\ncpy\nwrite-json-file\ncron-parser\nfind-babel-config\nlru-memoizer\nunzipper\nwinston-daily-rotate-file\nobliterator\ncsv-parser\nmnemonist\nset-immediate-shim\nthrough2-filter\ninit-package-json\nwinston-logzio\n@npmcli/package-json\npromzard\ns3-streamlogger\nbin-links\n@npmcli/map-workspaces\n@npmcli/name-from-folder\nwalk-up-path\nast-module-types\nunion\nwhy-is-node-running\n@npmcli/metavuln-calculator\nhot-shots\nparse-conflict-json\noidc-token-hash\nprom-client\nmarked-terminal\npromise-call-limit\nnode-source-walk\nlibmime\nlogzio-nodejs\npostcss-sorting\n@zeit/schemas\nethereum-cryptography\nparse-github-url\nlight-my-request\ndetective-stylus\nn\ncomment-json\ndetective-typescript\n@lezer/common\n@lezer/lr\nprecinct\nredux-mock-store\ndetective-postcss\ntwilio\nlog\ntocbot\n@hapi/podium\ndetective-es6\nget-amd-module-type\ndetective-sass\ndetective-scss\ndetective-cjs\ngenerate-object-property\nsprintf-kit\nhighcharts\ngraphql-subscriptions\n@tailwindcss/forms\njspdf\nchance\neslint-plugin-react-native\n
\n
\n\n### FAQs\n\n#### Why look into \"reproducibility\"?\n\nWe believe the strategy of leveraging reproducible builds for the purpose of associating artifacts with a source/repository outperforms the current provenance strategy with the added benefit of being backwards compatible.\n\n#### Will reproducibility get better with time?\n\nYes. As we add more strategies, we should see the percentatge of reproducible packages grow over time both net-new & previously published packages will benefit from the additional strategies. Feel free to contribute!\n\n### Credits\n\nBig thanks to [@siddharthkp](https://github.com/siddharthkp) for gifting the package name `reproduce` to us!\n\n### Learn More\n\nWe wrote a blog post about this project & the results we found which you can read here: https://blog.vlt.sh/blog/reproducibility\n\n\"Is\n","readmeFilename":"README.md"}