Headsmith v1.3.2

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.3.2
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	047d9b229db5a19e0f65c71d3b33da3c9f07656f0e1313d80b7d39affdc16716
Built with	Node v24.16.0
Commit	0fa621eb5e44fe0c401e446baeffe42dc4836b4b

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.