# D8. Deterministic packages

Sorted entries, fixed timestamps, DEFLATE level 9 or STORE, same esbuild version: the same sources give the same bytes, so the SHA-256 in the proof dossier identifies a delivery.