I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

  • @refalo
    link
    19 hours ago

    The problem is not near enough projects support reproducible builds, and many that do aren’t being regularly verified, at least publicly.