Headsmith v1.4.2

Verify this build yourself

This artifact is reproducible. You do not have to trust that it was built
from the source in this repository -- you can check.

git clone https://github.com/bcollard/headsmith.git && cd $(basename bcollard/headsmith)
git checkout v1.4.2
nvm use          # matches .nvmrc; the Node version affects the output
npm ci
node scripts/verify-reproducible.mjs headsmith-*.zip

And to confirm where it came from:

gh attestation verify headsmith-*.zip --repo bcollard/headsmith

SHA-256	ef48fc713a2ff2a7963b48ac6ce279e7929dcc3f089f7b92b87a54b47bbc048b
Built with	Node v24.16.0
Commit	26afc5bd5ded7bd3ef05887d945f41f7fe38a41a

The bundle is deliberately not minified, so the shipped JavaScript can be
read and diffed against the source.