Features:
Simple to set up:
Single binary, no other files, no installation needed.
Standalone, doesn't need inetd or ucspi-tcp.
No messing around with config files - all you have to specify is the www root.
Written in C - efficient and portable.
Small memory footprint.
Event loop, single threaded - no fork() or pthreads.
Generates directory listings.
Supports HTTP GET and HEAD requests.
Supports Range / partial content. (try streaming music files or resuming a download)
Supports If-Modified-Since.
Supports Keep-Alive connections.
Supports IPv6.
Can serve 301 redirects based on Host header.
Uses sendfile() on FreeBSD, Solaris and Linux.
Can use acceptfilter on FreeBSD.
At some point worked on FreeBSD, Linux, OpenBSD, Solaris.
ISC license.
suckless.org says darkhttpd sucks less.
Small Docker image (<100KB)
Security:
Can log accesses, including Referer and User-Agent.
Can chroot.
Can drop privileges.
Impervious to /../ sniffing.
Times out idle connections.
Drops overly long requests.
Limitations:
Only serves static content - no CGI.
Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.