Bug#1135279: node-yarnpkg: please make the build reproducible

Chris Lamb lamby at debian.org
Thu Apr 30 13:47:34 BST 2026


Source: node-yarnpkg
Version: 4.1.0+dfsg-4
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
node-yarnpkg could not be built reproducibly.

This is because executing the testsuite for the alcalzone-ansi-tokenize
component makes two extra copies of its codebase for some reason, so the
package contents will differ between a build in which "nocheck" is
specified or not.

Patch attached that removes these two extra copies.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2026-04-30 04:45:10.442677543 -0700
--- b/debian/rules	2026-04-30 05:26:28.418013960 -0700
@@ -51,3 +51,7 @@
 execute_after_dh_fixperms:
 	chmod 755 debian/yarnpkg/usr/share/nodejs/@yarnpkg/cli/bundles/yarn.js \
 		debian/yarnpkg/usr/share/nodejs/@yarnpkg/builder/lib/cli.js
+
+execute_after_dh_auto_test:
+	rm -rf alcalzone-ansi-tokenize/build/src
+	rm -rf alcalzone-ansi-tokenize/build/test


More information about the Reproducible-bugs mailing list