Package: xmake (2.9.9+ds-1) cross-platform build utility based on Lua Other Packages Related to xmake: dep: [libc6 ] (>= 2.38)
GNU C Library: Shared libraries
dep: [liblua5.4-0 ] (>= 5.4.6)
Shared library for the Lua interpreter version 5.4
dep: [liblz4-1 ] (>= 1.7.5)
Fast LZ compression algorithm library - runtime
dep: [libncurses6 ] (>= 6)
shared libraries for terminal handling
dep: [libreadline8t64 ] (>= 6.0)
GNU readline and history libraries, run-time libraries
dep: [libsv1 ] (>= 1.1)
Public domain cross-platform semantic versioning in c99
dep: [libtinfo6 ] (>= 6)
shared low-level terminfo library for terminal handling
dep: [lua-cjson ] (>= 2.1.0+dfsg)
JSON parser/encoder for Lua
dep: [xmake-data ] (>= 2.9.9+ds-1)
Data for xmake
Package file paths (8) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/xmake /usr/bin/xrepo /usr/share/doc/xmake/changelog.Debian.gz /usr/share/doc/xmake/changelog.gz /usr/share/doc/xmake/copyright /usr/share/doc/xmake/README.Debian /usr/share/man/man1/xmake.1.gz /usr/share/man/man1/xrepo.1.gz Field source: Debian 13 (Trixie) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
Last synced: Oct 29, 2026, 5:25:01 PM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.9.9+ds-1 / amd64 Observed Sep 1, 2026 sha256 6c84f5b0f3bc…0a9ea001Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 6c84f5b0f3bcd652375f57c1bb3a16d39f39648584842a30c194e2660a9ea001
Verify download
printf '%s %s\n' '6c84f5b0f3bcd652375f57c1bb3a16d39f39648584842a30c194e2660a9ea001' 'xmake_2.9.9+ds-1_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main amd64
2.9.9+ds-1 / arm64 Observed Sep 1, 2026 sha256 52194c18fecb…d6ede7b1Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 52194c18fecbf83b309acdfa0fc50df6e29b25a0b1c08e2c86d35983d6ede7b1
Verify download
printf '%s %s\n' '52194c18fecbf83b309acdfa0fc50df6e29b25a0b1c08e2c86d35983d6ede7b1' 'xmake_2.9.9+ds-1_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) main arm64
3.0.9+ds-1~bpo13+1 / amd64 Observed Sep 1, 2026 sha256 08abb25045a9…bcb9b790Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 08abb25045a9a60ff809435b676b6991ec190afa02a36c8d3c1f121fbcb9b790
Verify download
printf '%s %s\n' '08abb25045a9a60ff809435b676b6991ec190afa02a36c8d3c1f121fbcb9b790' 'xmake_3.0.9+ds-1~bpo13+1_amd64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) backports main amd64
3.0.9+ds-1~bpo13+1 / arm64 Observed Sep 1, 2026 sha256 8785c0c54498…133c7680Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 8785c0c5449801832e081200acf7c1404376242a586ce5df16c01ec5133c7680
Verify download
printf '%s %s\n' '8785c0c5449801832e081200acf7c1404376242a586ce5df16c01ec5133c7680' 'xmake_3.0.9+ds-1~bpo13+1_arm64.deb' | sha256sum --check --strict -Field source: Debian 13 (Trixie) backports main arm64
Sources Authoritative source; repository metadata signature verified
Signature evidence trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Repository-signature verification record
Signed-object SHA-256 d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Path main/binary-amd64/Packages.xz
Expected SHA-256 d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Observed SHA-256 d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Result match verified Authoritative source; repository metadata signature verified
Signature evidence trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Repository-signature verification record
Signed-object SHA-256 d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Path main/binary-arm64/Packages.xz
Expected SHA-256 acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Observed SHA-256 acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Result match verified Authoritative source; repository metadata signature verified
Signature evidence trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Repository-signature verification record
Signed-object SHA-256 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Path main/binary-amd64/Packages.xz
Expected SHA-256 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Observed SHA-256 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Result match verified Authoritative source; repository metadata signature verified
Signature evidence trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Repository-signature verification record
Signed-object SHA-256 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Path main/binary-arm64/Packages.xz
Expected SHA-256 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Observed SHA-256 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Result match verified