> "There's an ongoing effort at Debian to make all builds reproducible so that you can verify that they were built from the sources they provide for inspection. This should be completed soon."

Ah, good to know. Do you have any links to articles or discussions about this? Would like to learn more.