Hi Tom,

thanks for reaching out!

On Wed, Aug 03, 2016 at 02:47:46PM -0500, Tom Marble wrote:
> I've been thinking about software freedom for web applications
> and wondering if anyone has thought about or done any tooling
> for "reproducible builds" for JavaScript libraries?
 
I guess so, because 96% (479 out of 499) of the packages on
https://tests.reproducible-builds.org/debian/unstable/amd64/pkg_set_maint_pkg-javascript-devel.html
are reproducible (in our current test framework)! :-)

5 (1.0%) packages failed to build reproducibly: twitter-bootstrap3 npm
jssip modernizr node-mocha

15 (3.0%) packages failed to build from souce: libv8-3.14
node-oauth# node-lodash node-contextify# node-postgres node-xmpp
node-zipfile

For modernizr there's an unapplied patch to make it build reproducible
too! "#817979 modernizr: input order is not deterministic" - the bug
also has not seen a maintainer reply yet.

> Is there a way to use one of tools linked from (or elsewhere)
>   https://wiki.debian.org/ReproducibleBuilds
> to check if a JavaScript library (libjs-*) is passing the
> reproducible tests?

there are reprotest and diffoscope available in stretch and sid,
reprotest is a new tool you might want to try, and diffoscope is also
available from jessie-backports.


-- 
cheers,
        Holger

Attachment: signature.asc
Description: Digital signature

-- 
Pkg-javascript-devel mailing list
Pkg-javascript-devel@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-javascript-devel

Reply via email to