You don't. So the blob that is packaged and installed is identical to the one in the repository. Hence, it has no reproducibility issue.