On Sun, Aug 19, 2012 at 8:10 PM, Simon Josefsson <firstname.lastname@example.org> wrote:
>> As for
>> verification, having the source next to the minified version does not
>> guarantee anything about the minified version, all the more that we
>> don't have currently in Debian Wheezy a reliable minifier.
> That seems problematic -- so even if the source is shipped, there is no
> way to re-build the minified file?
It really depends on using exactly the same version of the same
minifier with exactly the same parameters (which you may not know) and
even then you cannot be sure, e. g. a minifier may use generate
shortened variable names randomly.
Pau Garcia i Quiles
(Due to my workload, I may need 10 days to answer)