You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like to build the project from source and also audit it for security reasons, but am not able to achieve a .jpl with the same checksum as that of the published version, v0.15.0. It appears to be due to webpack, which I'm not too familiar with, but some are saying it does not produce deterministic output unless specifically configured to do so. Related links:
$ git clone --branch v0.15.0 [email protected]:CalebJohn/joplin-rich-markdown.git
$ cd joplin-rich-markdown
$ export NODE_OPTIONS=--openssl-legacy-provider # required to bypass SSL error
$ npm ci # sources package-lock.json
$ sha256sum ./publish/plugin.calebjohn.rich-markdown.jpl
c1f0d0733a5075f92cb4609d635d6962a849be9e5cc18c219ecc195f1f0171a7 ./publish/plugin.calebjohn.rich-markdown.jpl
# expected from npmjs `v0.15.0` manifest:# b274952c6f8a4dbc5710847de86134925b98c5274ae1e3222657ae3ccdf9ad61
System details:
$ node --version
v20.16.0
$ npm
10.8.2
The text was updated successfully, but these errors were encountered:
CoeJoder
changed the title
[documentation] add deterministic build instructions
[feature] modify webpack config to achieve deterministic builds
Aug 2, 2024
I would like to build the project from source and also audit it for security reasons, but am not able to achieve a .jpl with the same checksum as that of the published version,
v0.15.0
. It appears to be due to webpack, which I'm not too familiar with, but some are saying it does not produce deterministic output unless specifically configured to do so. Related links:Is it possible to have deterministic build output?
The optimization config referenced in the above discussion:
https://webpack.js.org/configuration/optimization/#optimizationmoduleids
Here are my current build steps:
System details:
The text was updated successfully, but these errors were encountered: