Skip to content

Headsmith v1.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 12:55
· 32 commits to main since this release
v1.2.0
This tag was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.
44bf6a3
This commit was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.2.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith
SHA-256 ea5fd404fc5219e6f983ff82b5323179074be0c220ccf4f94902fb3ba6d61b72
Built with Node v24.16.0
Commit 44bf6a31bded558cdfd0458da94fdad6a4b992af

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Assets 5
Loading