https://bz.apache.org/bugzilla/show_bug.cgi?id=66644
Bug ID: 66644
Summary: Make Apache POI binaries reproducible
Product: POI
Version: unspecified
Hardware: PC
Status: NEW
Severity: normal
Priority: P2
Component: POI Overall
Assignee: dev@poi.apache.org
Reporter: dominik.stad...@gmx.at
Target Milestone: ---
There are various efforts underway to make binaries of open source software
reproducible.
For Java, there is https://github.com/jvm-repo-rebuild/reproducible-central
with tools and procedures to check if Java libraries are reproducible and to
see if there are changes necessary to make it reproducible.
Let's do a first run with current Apache POI binaries and the tooling to see
where we include non-reproducible content.
At least the following might pop up:
* Version number/build-date injected into sources at build time
* generated JavaDoc?
* Generated ooxml-sources
See the following resources for getting started:
*
https://github.com/jvm-repo-rebuild/reproducible-central/blob/master/doc/TOOLS.md
*
https://reproducible-builds.org/docs/jvm/#configuring-build-tools-for-reproducible-builds
*
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org
For additional commands, e-mail: dev-h...@poi.apache.org
