Python Wheel packages (actually renamed zip files) contains a metadata.json file, the fields of which are written in random order. Since they are zip files, they also suffer from the usual problems of zip files.

Known affected packages


strip-nondeterminism could normalize the archive file (775594).


A patch was submitted in 776026 to sort the files in metadata.json and to set the timestamps in the archive to a fixed value.

A patch was submitted in 795942 to update it to use SOURCE_DATE_EPOCH so that individual patching of reverse build deps is not required in our toolchain.