[Pkg-javascript-devel] Bug#1146092: marked as pending in pkg-js-tools

[Jochen Sprickerhof]

* Xavier <yadd at debian.org> [2026-08-31 13:24]:
>A reproducible test based on check/nocheck would have detect the xz 
>attack (https://en.wikipedia.org/wiki/XZ_Utils_backdoor)


That would have been nice and 
https://tests.reproducible-builds.org/debian is using nocheck for one 
build now and there is ongoing work to add support for that in 
debrebuild 
https://salsa.debian.org/debian/devscripts/-/merge_requests/662/ and 
salsa-ci: https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/735 .
I think it is too early to enable it on https://reproduce.debian.net/ 
already to block testing migration with it but we will surely get there.

Cheers Jochen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-javascript-devel/attachments/20260831/67def24d/attachment.sig>