A practical experiment on supply-chain security using reproducible builds - View it on GitHub