Package: pack (0.40.9-1.fc44) Convert code into runnable images pack is a CLI implementation of the Platform Interface Specification
for Cloud Native Buildpacks.
Other Packages Related to pack: Package file paths (5) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/pack /usr/share/doc/pack /usr/share/doc/pack/README.md /usr/share/licenses/pack /usr/share/licenses/pack/LICENSE Field source: Fedora 44 updates aarch64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
Last synced: Oct 29, 2026, 8:09:12 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
0.40.9-1.fc44 / aarch64 Observed Sep 1, 2026 sha256 bb5db3af5549…ac3c5809Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): bb5db3af5549155d633cd7f7ec6a872ac0f9bad7f3f16c4850e4f8a3ac3c5809
Verify download
printf '%s %s\n' 'bb5db3af5549155d633cd7f7ec6a872ac0f9bad7f3f16c4850e4f8a3ac3c5809' 'pack-0.40.9-1.fc44.aarch64.rpm' | sha256sum --check --strict -Field source: Fedora 44 updates aarch64
0.40.9-1.fc44 / x86_64 Observed Sep 1, 2026 sha256 314d92da8444…994893e5Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 314d92da8444c483b0942bb979807db4cd8fc1b0ecfcee98d3399479994893e5
Verify download
printf '%s %s\n' '314d92da8444c483b0942bb979807db4cd8fc1b0ecfcee98d3399479994893e5' 'pack-0.40.9-1.fc44.x86_64.rpm' | sha256sum --check --strict -Field source: Fedora 44 updates x86_64
0.39.1-3.fc44 / aarch64 Observed Sep 1, 2026 sha256 cb9924840e57…f5c50d5eSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): cb9924840e57270ed381968f659258958b3af24e47314579b71f02b4f5c50d5e
Verify download
printf '%s %s\n' 'cb9924840e57270ed381968f659258958b3af24e47314579b71f02b4f5c50d5e' 'pack-0.39.1-3.fc44.aarch64.rpm' | sha256sum --check --strict -Field source: Fedora 44 Everything aarch64
0.39.1-3.fc44 / x86_64 Observed Sep 1, 2026 sha256 c3d1905acc0b…66fdb5b1Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): c3d1905acc0bcfea35d581df01dccbdbb48d342e3c6620d934e874af66fdb5b1
Verify download
printf '%s %s\n' 'c3d1905acc0bcfea35d581df01dccbdbb48d342e3c6620d934e874af66fdb5b1' 'pack-0.39.1-3.fc44.x86_64.rpm' | sha256sum --check --strict -Field source: Fedora 44 Everything x86_64
Sources Authoritative source; repository metadata signature verified
Signature evidence 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee
Repository-signature verification record
Signed-object SHA-256 236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
Keyring revision RPM-GPG-KEY-fedora-44-primarySHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991
Repository-signature verification record
Signed-object SHA-256 1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
Keyring revision RPM-GPG-KEY-fedora-44-primarySHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b
Repository-signature verification record
Signed-object SHA-256 2ec0ba92e556309075d8efe3c3301b36bb7ecd47c4e17566f0192c9c5436ed5f
Keyring revision RPM-GPG-KEY-fedora-44-primarySHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable Authoritative source; repository metadata signature verified
Signature evidence 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419
Repository-signature verification record
Signed-object SHA-256 a69a0ab020457a7af2515066b7caccb3950bcf9dc7bedb52b1850098d9857ae1
Keyring revision RPM-GPG-KEY-fedora-44-primarySHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy 1 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Repository metadata hash linkage
Result Recorded as verified; digest details unavailable