When a fontforge script is used, it can appear to use the current build time in embedded metadata in a field (not the "modification time").
Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).