Bug#1135279: node-yarnpkg: please make the build reproducible
Chris Lamb
lamby at debian.org
Thu Apr 30 13:47:34 BST 2026
Source: node-yarnpkg
Version: 4.1.0+dfsg-4
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
node-yarnpkg could not be built reproducibly.
This is because executing the testsuite for the alcalzone-ansi-tokenize
component makes two extra copies of its codebase for some reason, so the
package contents will differ between a build in which "nocheck" is
specified or not.
Patch attached that removes these two extra copies.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby at debian.org / chris-lamb.co.uk
`-
-------------- next part --------------
--- a/debian/rules 2026-04-30 04:45:10.442677543 -0700
--- b/debian/rules 2026-04-30 05:26:28.418013960 -0700
@@ -51,3 +51,7 @@
execute_after_dh_fixperms:
chmod 755 debian/yarnpkg/usr/share/nodejs/@yarnpkg/cli/bundles/yarn.js \
debian/yarnpkg/usr/share/nodejs/@yarnpkg/builder/lib/cli.js
+
+execute_after_dh_auto_test:
+ rm -rf alcalzone-ansi-tokenize/build/src
+ rm -rf alcalzone-ansi-tokenize/build/test
More information about the Reproducible-bugs
mailing list