Skip to content

Headsmith v1.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 19:29
· 29 commits to main since this release
v1.3.0
This tag was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.
5fbc666
This commit was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.3.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith
SHA-256 170436104508ccbb4b047306fb1d7b22857a045f2a8273cb7b18c98a8ced3c29
Built with Node v24.16.0
Commit 5fbc6663bec43541f2d38f688d9789b3e6139b39

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Assets 5
Loading