OmniBOR

Reproducible identifiers and fine-grained build dependency tracking for software artifacts.