A build is not reproducible where it incorporates both open and closed code.  A company may &quot;open source&quot; some important stuff (encryption algorithms) but keep enough code closed that the final build cannot be duplicated from the &quot;open&quot; code.  It is therefore difficult to judge whether the open code has actually been adopted properly, or whether any closed code hasn&#x27;t created new bugs.