Sources match the actual Tor and libseccomp versions recorded by each platform build.
Alpine recipes are captured at each installed package's exact source commit, with SHA-512 source verification.
Mac uses the latest available official stable Tor Expert Bundle independently of Linux. Its URL and SHA-256 are in BUILD.json.
Upstream Mac recipes: https://gitlab.torproject.org/tpo/applications/tor-browser-build
See sources.json for source URLs and checksums, and each bundle's licenses directory for dependency metadata and notices.