Headsmith v1.4.2

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.4.2
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	ef48fc713a2ff2a7963b48ac6ce279e7929dcc3f089f7b92b87a54b47bbc048b
Built with	Node v24.16.0
Commit	26afc5bd5ded7bd3ef05887d945f41f7fe38a41a

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.4.0

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.4.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	17ce38a9145e20d64a28b235fa88d51cfbd9faa73fc3df3c74cb537eb278ea8c
Built with	Node v24.16.0
Commit	09774863990b5a6fab9a1b133a7496dc1dd16ae8

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.3.2

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.3.2
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	047d9b229db5a19e0f65c71d3b33da3c9f07656f0e1313d80b7d39affdc16716
Built with	Node v24.16.0
Commit	0fa621eb5e44fe0c401e446baeffe42dc4836b4b

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.3.1

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.3.1
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	94997f768ca46e58cec6a6b135c2d62010ca7c4b4c8253d927a253ec094894a0
Built with	Node v24.16.0
Commit	4417eddd37ba45b84cc61001dbff896192c3acfc

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.3.0

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.3.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	170436104508ccbb4b047306fb1d7b22857a045f2a8273cb7b18c98a8ced3c29
Built with	Node v24.16.0
Commit	5fbc6663bec43541f2d38f688d9789b3e6139b39

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.2.0

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.2.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	ea5fd404fc5219e6f983ff82b5323179074be0c220ccf4f94902fb3ba6d61b72
Built with	Node v24.16.0
Commit	44bf6a31bded558cdfd0458da94fdad6a4b992af

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.1.1

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.1.1
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	5f25a2c03e24690ed46f37f00b5a1435e5a219f3ae467d36eccaa1ef584423ac
Built with	Node v24.16.0
Commit	095b96c09f27d10a378ba7e20ee25d3160ffad8a

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.1.0

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.1.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	9db160343a1c33b06ee6721f87e3ab1632b2a4bc172168b59030b017307118b7
Built with	Node v24.16.0
Commit	06b55d31f6a49ac18e06feedd0c471c75ffc5ec8

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Headsmith v1.0.0

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.0.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	06c54c3741773c19f0d2da0a99d54287bffe34471b70008b1d392d3b5a5b8539
Built with	Node v24.16.0
Commit	3314331070e22d46046bcd27bf54e544f98d2b3c

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.