Reproducible Central hits the 500 fully reproduced builds of upstream projects releases for the JVM

[Hervé Boutemy]

Le lundi 28 mars 2022, 13:13:12 CEST Holger Levsen a écrit :
> Hi Hervé,
> 
> On Sun, Mar 27, 2022 at 08:27:11AM +0200, Hervé Boutemy wrote:
> > I just wanted to share how the number of projects that produce
> > reproducible
> > releases for the JVM is growing, year after year.
> > 
> > This forced me to rewrite the reporting system, that did not work any more
> > in one unique page listing every builds: now the main page lists
> > projects, and releases reproducibility status is displayed in a
> > per-project page
> > 
> > see https://github.com/jvm-repo-rebuild/reproducible-central
> 
> that's great news, thanks for sharing!
> 
> to bring things into perspective, when you say "500 fully reproduced builds
> of upstream projects releases", out of how many upstream projects in total?
> 550? 5000? 50000? :)
I don't have the statistics on releases published each day, but I suppose it's 
more than 500 (yes, each day)

It's clear that currently, Reproducible Builds for projects publishing to 
Maven Central is a minority

But it's not a surprise: we're talking about upstream projects, that do their 
normal releases. And tooling to have good chances of getting Reproducible 
Builds easily for "normal" people just wanting to get a result without having 
too much work is quite recent.

Then I see this result more as a proof that upstream projects can have 
Reproducible Builds (and not only rebuilds done in the centrally managed 
environment of a Linux distro): it works without adding much constraints.

It's really an important proof of feasibility at scale, before more projects 
embrace the movement.

Regards,

Hervé