molto 0.66.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.66.0
curl -fsSLO $base/molto-0.66.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.66.0-x86_64-linux
sudo install molto-0.66.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.66.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.66.0"
$exe  = "molto-0.66.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.66.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.66.0
curl -fsSLO $base/molto-0.66.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.66.0-arm64-macos
sudo install molto-0.66.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.66.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• build: migrate the complete moltest set to v0.4.0 by @black-redoc in #126

Full Changelog: v0.65.0...v0.66.0

molto 0.65.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.65.0
curl -fsSLO $base/molto-0.65.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.65.0-x86_64-linux
sudo install molto-0.65.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.65.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.65.0"
$exe  = "molto-0.65.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.65.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.65.0
curl -fsSLO $base/molto-0.65.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.65.0-arm64-macos
sudo install molto-0.65.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.65.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• build: update moltest packages and clear lint warnings by @black-redoc in #124
• fix: preserve C requirements when resolving mixed builds by @black-redoc in #125

Full Changelog: v0.64.0...v0.65.0

molto 0.64.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.64.0
curl -fsSLO $base/molto-0.64.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.64.0-x86_64-linux
sudo install molto-0.64.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.64.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.64.0"
$exe  = "molto-0.64.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.64.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.64.0
curl -fsSLO $base/molto-0.64.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.64.0-arm64-macos
sudo install molto-0.64.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.64.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• feat: implement RFC-0024 manifest packages as dependencies by @black-redoc in #123

Full Changelog: v0.63.1...v0.64.0

molto 0.63.1

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.63.1
curl -fsSLO $base/molto-0.63.1-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.1-x86_64-linux
sudo install molto-0.63.1-x86_64-linux /usr/local/bin/molto

Windows

molto-0.63.1-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.63.1"
$exe  = "molto-0.63.1-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.63.1-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.63.1
curl -fsSLO $base/molto-0.63.1-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.1-arm64-macos
sudo install molto-0.63.1-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.63.1.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• fix: refresh the lock when development dependencies change by @black-redoc in #122

Full Changelog: v0.63.0...v0.63.1

molto 0.63.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.63.0
curl -fsSLO $base/molto-0.63.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.0-x86_64-linux
sudo install molto-0.63.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.63.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.63.0"
$exe  = "molto-0.63.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.63.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.63.0
curl -fsSLO $base/molto-0.63.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.0-arm64-macos
sudo install molto-0.63.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.63.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• feat: a dependency names the operating systems it is for by @black-redoc in #121

Full Changelog: v0.62.0...v0.63.0

molto 0.62.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.62.0
curl -fsSLO $base/molto-0.62.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.62.0-x86_64-linux
sudo install molto-0.62.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.62.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.62.0"
$exe  = "molto-0.62.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.62.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.62.0
curl -fsSLO $base/molto-0.62.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.62.0-arm64-macos
sudo install molto-0.62.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.62.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• feat: a published dependency that compiles keeps its warnings to itself by @black-redoc in #119
• feat: the libraries a configuration sees are configured first by @black-redoc in #120

Full Changelog: v0.61.0...v0.62.0

molto 0.61.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.61.0
curl -fsSLO $base/molto-0.61.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.61.0-x86_64-linux
sudo install molto-0.61.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.61.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.61.0"
$exe  = "molto-0.61.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.61.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.61.0
curl -fsSLO $base/molto-0.61.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.61.0-arm64-macos
sudo install molto-0.61.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.61.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• feat: a delegated build says what it compiles (RFC-0025) by @black-redoc in #118
• docs: RFC-0024 accepted, include/ is the interface by convention by @black-redoc in #117

Full Changelog: v0.60.0...v0.61.0

molto 0.60.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.60.0
curl -fsSLO $base/molto-0.60.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.60.0-x86_64-linux
sudo install molto-0.60.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.60.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.60.0"
$exe  = "molto-0.60.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.60.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.60.0
curl -fsSLO $base/molto-0.60.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.60.0-arm64-macos
sudo install molto-0.60.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.60.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• fix: CMake configuration sees every dependency include, and cached objects key on it by @black-redoc in #116

Full Changelog: v0.59.0...v0.60.0

molto 0.59.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.59.0
curl -fsSLO $base/molto-0.59.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.59.0-x86_64-linux
sudo install molto-0.59.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.59.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.59.0"
$exe  = "molto-0.59.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.59.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.59.0
curl -fsSLO $base/molto-0.59.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.59.0-arm64-macos
sudo install molto-0.59.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.59.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• feat: say what is being fetched and configured by @black-redoc in #113
• feat: RFC-0023, binary recipes that name the archive upstream publishes by @black-redoc in #114
• feat: configure a dependency with its own CMake by @black-redoc in #115

Full Changelog: v0.58.0...v0.59.0

molto 0.58.0

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.58.0
curl -fsSLO $base/molto-0.58.0-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.58.0-x86_64-linux
sudo install molto-0.58.0-x86_64-linux /usr/local/bin/molto

Windows

molto-0.58.0-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.58.0"
$exe  = "molto-0.58.0-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.58.0-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.58.0
curl -fsSLO $base/molto-0.58.0-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.58.0-arm64-macos
sudo install molto-0.58.0-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.58.0.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• fix: name no DLL in the binary, so the v0.57.0 release check passes by @black-redoc in #112

Full Changelog: v0.57.0...v0.58.0