Java .jar files written by some tools encode filesystem access ordering in the "Include-Resource" MANIFEST.MF header. https://github.com/jvm-repo-rebuild/reproducible-central/issues/99 https://issues.apache.org/jira/browse/FELIX-6602 https://github.com/apache/felix-dev/pull/208
Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).