Frankie G-J

Hey @paketo-buildpacks/web-servers-maintainers do we have a sense of whether the Tiny build and run images contain the necessary packages for NGINX to run? If not, which are missing?

@ryanmoran or @trevorblades, is this still a relevant feature request for you?

@paketo-buildpacks/nodejs-maintainers Any blockers or things to keep in mind when implementing this feature?

I see that currently the miniconda and cpython dependencies have deprecation dates available in `buildpack.toml`. These are missing for pipenv and pip. Will we need to gather deprecation date information...

As @ForestEckhardt points out on his [draft PR](https://github.com/paketo-buildpacks/python/pull/514#issuecomment-1230648025), there are still aspects of python builds that are NOT reproducible (now that SBOM reproducibility has been resolved). Some of these may...

For the simple `no_package_manager` sample [app](https://github.com/paketo-buildpacks/samples/blob/32f2e2f92c026a6d663f116cd4a2184e2eac4a3e/python/no_package_manager) in the Paketo samples repo, rebuilding with the same inputs produces images with identical SHAs. From this, I can surmise that the manner in...

For the `pip` sample [app](https://github.com/paketo-buildpacks/samples/blob/32f2e2f92c026a6d663f116cd4a2184e2eac4a3e/python/pip) in the Paketo samples repo, rebuilding with the same inputs produces images with different SHAs - i.e. builds are NOT reproducible. The layers that differ...

For the `pipenv` sample [app](https://github.com/paketo-buildpacks/samples/blob/32f2e2f92c026a6d663f116cd4a2184e2eac4a3e/python/pipenv), both the cpython and pipenv-install layers have different SHAs for builds with identical inputs. This makes builds NOT reproducible. Setting `PYTHONPYCACHEPREFIX` at build time addresses...

For the `poetry` sample [app](https://github.com/paketo-buildpacks/samples/blob/32f2e2f92c026a6d663f116cd4a2184e2eac4a3e/python/poetry), setting `PYTHONPYCACHEPREFIX` also makes the cpython layer reproducible, but the the poetry and poetry-install layers still are not. This [ongoing discussion](https://github.com/python-poetry/poetry/discussions/4693) on the poetry repository...

For `conda` sample [app](https://github.com/paketo-buildpacks/samples/blob/32f2e2f92c026a6d663f116cd4a2184e2eac4a3e/python/conda), the conda-env-update layer is the one that makes builds non-reproducible. The differences are caused by: - as with cpython, the `__pycache__` directories that are stored in...