just check the submodules, no?<p>reproducible binaries doesn&#x27;t really matter that much when you are compiling from source (you arn&#x27;t proving that someone did or did not tamper with the binary provided, if no one is providing that binary in that situation)