Reproducible-central Alternatives

Similar projects and alternatives to reproducible-central

go

2,068 119,564 10.0 Go reproducible-central VS go

The Go programming language
Moby

212 67,716 10.0 Go reproducible-central VS Moby

The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
svntogit-community

113 311 10.0 Shell reproducible-central VS svntogit-community

Discontinued Automatic import of svn 'community' repo (read-only mirror)
slsa

35 1,422 8.7 Shell reproducible-central VS slsa

Supply-chain Levels for Software Artifacts
bob

33 432 4.5 Go reproducible-central VS bob

Bob is a high-level build tool for multi-language projects. (by benchkram)
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better reproducible-central alternative or higher similarity.

Suggest an alternative to reproducible-central

reproducible-central reviews and mentions

Posts with mentions or reviews of reproducible-central. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-11-01.

Is My Package Reproducible Yet?
7 projects | news.ycombinator.com | 1 Nov 2022

It's pretty doable to create reproducible builds with gradle or maven: https://reproducible-builds.org/docs/jvm/
Also, releases on maven central typically include a sources.jar along with the binaries. It's required to provide that as well as javadoc to publish on maven central, I think. They also require jars to be signed and there are some manual checks before they activate your account to verify e.g. domain ownership and metadata of your project. It's not perfect but it's better than what many other packagemanagers do. It's actually a bit of a PITA to setup; I've wasted quite a bit of time getting some stuff published there just trying to figure out their convoluted processes and tools and error messages. This stuff is way too hard in it's current form.
Not all projects that use these build tools are fully reproducible but that is probably pretty easy to fix if people raise awareness of issues around this topic.
There's even a website that tracks reproducibility for some common libraries on maven central: https://github.com/jvm-repo-rebuild/reproducible-central#rea...
If you want to use artififacts produced straight from git hashes, tags, or branches, jitpack.io is pretty neat.