Skip to content

Headsmith v1.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 11 Aug 15:33
· 45 commits to main since this release
v1.0.0
This tag was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.
3314331
This commit was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.0.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith
SHA-256 06c54c3741773c19f0d2da0a99d54287bffe34471b70008b1d392d3b5a5b8539
Built with Node v24.16.0
Commit 3314331070e22d46046bcd27bf54e544f98d2b3c

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Assets 5
Loading