molto 0.63.1

Linux

Static x86-64 binary. No glibc requirement, nothing to unpack.

base=https://github.com/moltobuild/molto/releases/download/v0.63.1
curl -fsSLO $base/molto-0.63.1-x86_64-linux
curl -fsSLO $base/SHA256SUMS
sha256sum --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.1-x86_64-linux
sudo install molto-0.63.1-x86_64-linux /usr/local/bin/molto

Windows

molto-0.63.1-x86_64-windows.exe, x86-64, Windows 10 or later.
Statically linked against UCRT: there is nothing to put beside it.

Measured in CI, on a Windows runner, every push: molto's full test
suite, new/build/run on a project — asserted against this
exact binary before it is published — and molto building molto with
molto. The Windows badge on the README went green on 2026-09-04 and
is what to read for the state of the port.

Install it with PowerShell. Get-FileHash and Invoke-WebRequest
are built in, so there is nothing to install in order to install it:

$base = "https://github.com/moltobuild/molto/releases/download/v0.63.1"
$exe  = "molto-0.63.1-x86_64-windows.exe"
$dir  = "$env:LOCALAPPDATA\Programs\molto"

New-Item -ItemType Directory -Force -Path $dir | Out-Null
Invoke-WebRequest "$base/$exe" -OutFile "$dir\molto.exe"
Invoke-WebRequest "$base/SHA256SUMS" -OutFile "$env:TEMP\SHA256SUMS"

# The sums file names the file it covers, so check against that line.
$want = (Select-String -Path "$env:TEMP\SHA256SUMS" -Pattern $exe).Line.Split()[0]
$got  = (Get-FileHash "$dir\molto.exe" -Algorithm SHA256).Hash.ToLower()
if ($want -ne $got) { throw "checksum mismatch" }

# On PATH for this user, for every shell after this one.
[Environment]::SetEnvironmentVariable(
    "Path", [Environment]::GetEnvironmentVariable("Path", "User") + ";$dir", "User")

Open a new terminal, then molto new hello --bin and molto run.

macOS

molto-0.63.1-arm64-macos, Apple Silicon, and the full suite
passes on a macOS runner (RFC-0018).

base=https://github.com/moltobuild/molto/releases/download/v0.63.1
curl -fsSLO $base/molto-0.63.1-arm64-macos
curl -fsSLO $base/SHA256SUMS
shasum -a 256 --check --ignore-missing SHA256SUMS
chmod +x molto-0.63.1-arm64-macos
sudo install molto-0.63.1-arm64-macos /usr/local/bin/molto

Two things this binary does not claim, both worth knowing before you
run it:

It is not signed or notarised. Downloaded with curl that
changes nothing — the command above works as written. Downloaded with
a browser, macOS attaches a quarantine attribute and refuses to
start it with a message about an unverified developer. Remove it, or
open the file once from Finder with a right click:

xattr -d com.apple.quarantine molto

It is not static, and cannot be. Apple ships no static libSystem
and does not support a fully static executable, so this links against
libSystem — which is part of the operating system and therefore
always present. Nothing has to be unpacked beside it, and CI asserts
that every library it names lives under /usr/lib.

Intel Macs are not covered. Nobody has measured one, and RFC-0018
declines to promise what has not been measured.

Choosing a compiler

Molto does not choose one, it asks pickup. Install that
and molto finds a toolchain by itself; without it, name one by hand:

export C_COMPILER=gcc CPP_COMPILER=g++

Without either, new, init, add, remove and metadata work, and
build, test, fmt and lint report that no compiler was resolved.

molto-0.63.1.cdx.json is molto's own CycloneDX bill of materials.

What's Changed

• fix: refresh the lock when development dependencies change by @black-redoc in #122

Full Changelog: v0.63.0...v0.63.1