Skip to content

Samepack v0.1.0

Choose a tag to compare

View all tags
@LubuSeb LubuSeb released this 29 Aug 14:02
· 6 commits to main since this release
v0.1.0
a46076f

Samepack is a zero-dependency CLI for deterministic release archives and safe archive forensics.

Highlights:

  • Builds canonical TAR, TAR.GZ, and ZIP archives.
  • Explains whether different archive hashes mean packaging-only differences or changed payload files.
  • Reports exact added, removed, and modified paths without extracting either archive.
  • Provides stable JSON and CI-friendly exit codes.
  • Rejects traversal, absolute/control-character paths, duplicates, case collisions, oversized entries, and unsafe special types.
  • Uses only the Go standard library; go.mod has no require block.

Proof:

  • Windows and Linux produce byte-identical demo archives in the public verification workflow.
  • Executables are built twice and compared on each CI platform.
  • Real GitHub-generated ripgrep TAR.GZ and ZIP archives were correctly identified as identical payload content.

Download the binary for your operating system and verify it with checksums.txt.

Assets 11
Loading