[Pkg-javascript-devel] Bug#954409: node-browserify-lite: please make the output reproducible

[Chris Lamb]

Source: node-browserify-lite
Version: 0.5.0-8
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: toolchain randomness
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
node-browserify-lite generates non-deterministic output.

I tracked this down to JSON.stringify not ordering its result by
default, resulting in output varying like the below (after pretty-
printing):

    -    "./foo": 2,
    -    "./bar": 1,
    +    "./bar": 1,
    +    "./foo": 2,

This was affecting many packages, including libjs-webrtc-adapter and
likely many more.

A patch (by myself) is attached. It is upstream blessed but a new
upstream release is also promised shortly if you want to wait for that
too.

  [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: node-browserify-lite.diff.txt
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20200321/807209c6/attachment.txt>