bandit/bandit-1.6.0-1-any.pkg.tar.xz build reproducible in our test framework:
fb021bf3c40e07cf6822e380c60bef11a90a364fb4e962c86e07d0ce99dc9a7a bandit-1.6.0-1-any.pkg.tar.xz
4755275ad717658c18ab2812916df9c1e8e3766f79b0db976f2a55bdd963782d bandit-1.6.0-1-any.pkg.tar.xz-b1.BUILDINFO.txt
4755275ad717658c18ab2812916df9c1e8e3766f79b0db976f2a55bdd963782d bandit-1.6.0-1-any.pkg.tar.xz-b2.BUILDINFO.txt