[ryukafalz]

Software Heritage is also helpful here, and Guix is integrating with it - see e.g. https://guix.gnu.org/blog/2019/connecting-reproducible-deplo...

[microtonal]

Nix is also integrating with the Software Heritage:

https://www.tweag.io/blog/2020-06-18-software-heritage/