Please make the builds reproducible
The jars produced by ASM are not reproducible. In other words,
gradle :asm:jar && openssl dgst -sha512 asm/build/libs/*
=>
6b6e63da922b1ee39a5f4699acbfc2c768dfc98c18fb8a046ad2885d0a84c1f2b70d3f5da3e6e059afcacf6b4899d88b57f72a46218f63849657e36ba569b618
rm asm/build/libs/*
gradle :asm:jar && openssl dgst -sha512 asm/build/libs/*
=>
3843180af71d89826bb470506e16f2d5973bfbc9a18d7148e28d99d7363ef6295699a121e4f106bbc75bd4591b2841cbac535487cdf7f3b8c7146c7d8acd513b
As you see, every build produces a different archive.
It would be so much better if the jars produced by ASM were reproducible. It would simplify verification that jar contents matches the source code.
Luckily, Gradle has a simple way to make archives reproducible: https://github.com/apache/jmeter/blob/7556991464f6e5aa214889fbf22be00e8d929083/build.gradle.kts#L280-L286
tasks.withType<AbstractArchiveTask>().configureEach {
// Ensure builds are reproducible
isPreserveFileTimestamps = false
isReproducibleFileOrder = true
dirMode = "775".toInt(8)
fileMode = "664".toInt(8)
}