https://bugzilla.suse.com/show_bug.cgi?id=1231254 Bug ID: 1231254 Summary: python-panel: package-lock.json reproducible builds issue Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: code@bnavigator.de Reporter: bwiedemann@suse.com QA Contact: qa-bugs@suse.de CC: badshah400@gmail.com Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our python-panel package always varies in package-lock.json because it embeds a random HTTP port "node_modules/@babel/runtime": { "version": "7.25.6", - "resolved": "http://localhost:42741/-/@babel-runtime-7.25.6.tgz", + "resolved": "http://localhost:33549/-/@babel-runtime-7.25.6.tgz", "integrity": "sha512-VBj9MYyDb9tuLq7yzqjgzt6Q+IBQLrGZfdjOekyEirZPHxXWoTSGUTMrpsfi58Up73d13NfYLv8HT9vmznjzhQ==", "license": "MIT", "dependencies": { dropping or normalizing after the build does not work, because /usr/lib/python3.10/site-packages/panel-1.5.0.dist-info/RECORD contains a hash of the generated package-lock.json -- You are receiving this mail because: You are on the CC list for the bug.