Reproducible builds

[mering]

Running the same build twice produces different archives as timestamps differ.

Please add an option --reproducible which would set the timestamp to a fixed value.

We are currently using the following workaround:

EXT_LOCAL_NAME=$(pwd)/my-extension.vsix
vsce package --allow-missing-repository -o ${EXT_LOCAL_NAME}

# Create reproducible archive by setting deterministic timestamp
TMPDIR=$(mktemp -d)
unzip -q ${EXT_LOCAL_NAME} -d ${TMPDIR}
rm -f ${EXT_LOCAL_NAME}
cd ${TMPDIR} && find -exec touch -d 1970-01-01T00:00:00Z "{}" \; && zip -q -r -oX ${EXT_LOCAL_NAME} *
rm -rf ${TMPDIR}

[joaomoreno]

We closed this issue because we don't plan to address it in the foreseeable future. If you disagree and feel that this issue is crucial: we are happy to listen and to reconsider.

If you wonder what we are up to, please see our roadmap and issue reporting guidelines.

Thanks for your understanding, and happy coding!

[scholarsmate]

I think reproducible builds are something to reconsider. There are downstream projects that exist where reproducibility is at least important if not critical. While it may not be considered crucial with vsce in isolation, it can indeed be critical for other projects that use vsce.