Reproducible Builds Python Packages

apksigcopier

apksigcopier - copy/extract/patch android apk signatures & compare apks

apksigtool

apksigtool - parse/verify/clean/sign android apk (signing block)

bobbuildtool

Bob build tool - Functional cross platform build-automation tool

repro-apk

reproducible-apk-tools - scripts to make android apks reproducible

repro-lambda

Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf.

deterministic-zip-go

Simple (almost drop-in) replacement for zip that produces deterministic files.

python-stripzip

strip zip timestamps for reproducible builds

shotbox

Reproducible screenshots of real programs in a sealed session: X11 on Xvfb or Wayland under headless sway, with a private D-Bus and scratch home. Waits for readiness instead of sleeping, drives keys and the pointer, and compares pictures. Python, CLI and Playwright helpers.

scrollcase-consumer

Pack entire environments as self-contained boxes (eg. an AI Model). Pinned, validated, signed and air-gappable, for macOS Metal, Linux and Windows (CPU and CUDA).

ggufpacker

Check that a GGUF quant is actually what it claims: bit-exact derivation attestations, verified across machines on public CI. Also packs quant ladders as recipes — 16 GiB -> 1.8 GiB, every file regenerated bit-exact.

oasis-rofl-client

Official SDK for the Oasis Network.

base-image-inspector

🐳 Find and digest-pin official container base images in seconds - Python, .NET, Java, Go, Node.js, Rust, Ubuntu, and more.

pinlint

Static linter that checks a requirements file is fully version-pinned and hash-pinned, for CI and pre-commit.

verifyhash-einvoice

Tamper-evidence toolkit (npm verifyhash / verify-vh) + a zero-dependency EN 16931 / XRechnung / Factur-X e-invoice validator. Offline, permissionless, CI-gateable.

qiskit-leaky-layout

A transpilation plugin for Qiskit with a modified layout stage that encodes (classical) information using the virtual-to-physical qubit mapping.

qiskit-leaky-scheduling

A transpilation plugin for Qiskit with a modified scheduling stage that encodes (classical) information modifying the angles of RZGates without leading to changes in the computation results

qiskit-leaky-init

A transpilation plugin for Qiskit with a modified init stage that encodes (classical) information adding RZGates to auxiliary qubits

oasis-rofl-client-rube

Official SDK for the Oasis Network.

pylock-lint

Static CI linter for PEP 751 pylock.toml: hash completeness, sdist-only builds, platform portability, and drift vs pyproject.toml.

pegana-sdk

Offline verifier for Pegana peg-risk receipts — re-derive any published alert byte-for-byte and check its on-chain anchor, without trusting Pegana's servers.

mk10-pro

Pre-delivery truth infrastructure

msvcpp-normalize-pe

Normalize Windows PE files for byte-for-byte reproducible MSVC++ builds by patching timestamps, GUIDs, and debug metadata