Skip to content

Headsmith v1.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 30 Aug 20:19
· 24 commits to main since this release
v1.4.0
This tag was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.
0977486
This commit was signed with the committer’s verified signature.
bcollard Baptiste Collard
SSH Key Fingerprint: L2CXmcJdwtc1SZARDQz6n4PvqclNYgYMDOfV/k/kKDM
Verified
Learn about vigilant mode.

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.4.0
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith
SHA-256 17ce38a9145e20d64a28b235fa88d51cfbd9faa73fc3df3c74cb537eb278ea8c
Built with Node v24.16.0
Commit 09774863990b5a6fab9a1b133a7496dc1dd16ae8

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.

Assets 5
Loading