andyf: thank you very much!

Hwat is the consensus regarding using git master or specific git commit in port recipes? Release would be better, but there was none since long, sadly.

I'd think a specific commit would be the only way to make the recipe reproduceable.

Yes, for a repository that doesn't have a suitable tag or release we would download the source archive from a particular commit and put that on the source mirror and set up to build from that.