How to verify Source Code in Package is same as what's in an Instance
I need to prove with absolute certainty the package's source is the same source, or is not the same source as the compiled object in the production instance.
Coming from an IBM background, I would simply compile the questionable source in a safe instance (library), and compare the compiled obect's size to the compiled obeject's size in the production instances. A binary size comparizon would substantiate a positive patch, or not.