Skip to content

Headsmith v1.1.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 08:33
· 40 commits to main since this release
v1.1.0
This tag was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.
06b55d3
This commit was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.1.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith
SHA-256 9db160343a1c33b06ee6721f87e3ab1632b2a4bc172168b59030b017307118b7
Built with Node v24.16.0
Commit 06b55d31f6a49ac18e06feedd0c471c75ffc5ec8

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Assets 5
Loading