Packages / Alpine Linux 3.21 / apko

[Source: apko]

Package: apko (0.9.0-r15)

declarative APK-based container building tool with support for Sigstore signatures

Other Packages Related to apko:

  • dep: so:libc.musl-aarch64.so.1

    Package not available

Download apko

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch649.2 MiB27 MiBlist of filesNot published
x86_649.9 MiB29 MiBlist of filesNot published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.21 community aarch64 revision v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Alpine Linux 3.21 in the browserBuild an image that includes apko

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
0.9.0-r15v3.21 / communityaarch64Alpine Linux 3.21 · community · aarch649.2 MiB27 MiBNot reported
0.9.0-r15v3.21 / communityx86_64Alpine Linux 3.21 · community · x86_649.9 MiB29 MiBNot reported

Field source: Alpine Linux 3.21 community aarch64 revision v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
10/25
Dependency metadata
15/15
Package-file index
0/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 70/100

Field source: Alpine Linux 3.21 community aarch64 revision v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4, Alpine Linux 3.21 community x86_64 revision v3-21-community-x86-64:794508fb0cc85267c4bdac308aaabf05686b1e864a5e51a294e0a00f8eaf8409. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Alpine Linux 3.21 community aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision v3-21-community-aarch64:6d1639bb68111bc6380b811544def4ae1402cd2cfa7951198cfe3e436c16d7d4

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed object
    Not recorded
    Signed-object SHA-256
    279f8a6a83fc0feb444bebd893ca04cca06191038774aacfd1e7cd82c9ce7086
    Signer fingerprint
    Not recorded
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Alpine Linux 3.21 community x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision v3-21-community-x86-64:794508fb0cc85267c4bdac308aaabf05686b1e864a5e51a294e0a00f8eaf8409

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed object
    Not recorded
    Signed-object SHA-256
    7ef0a4300dff2958d96d72458a15ac39d41d7b8c54cdd093f4f42277790a3eb3
    Signer fingerprint
    Not recorded
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026