It's not even endorsed by me, strictly for science and lulz.
This is an experiment for building verifiable Debian root filesystems (e.g. for Docker images), and indexing such filesystems' contents.
The idea is to provide a system like NPM's package.json
and package-lock.json
that operate on .deb archives:
Those files drive a Dockerfile template that assembles the image.