See - https://github.com/ergebnis/composer-normalize/actions/runs/17346237923/job/49246590651 - https://docs.github.com/de/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases