Windows package management, trimmed down.

Packages without the ceremony.

WPKM is a lightweight Windows package manager built around a tiny command set, fast GitHub-native publishing, and SHA3-512 integrity verification.

C:\> wpkm get milli
PowerShell · WPKM0.1.0
PS C:\Users\Admin>
PS C:\Users\Admin> wpkm get milli
Fetching package milli...
Reading manifest ✓
Downloading payload ✓
Verifying SHA3-512 MATCH
Installing package ✓
milli 0.1.0 installed successfully.
C:\Users\Admin\AppData\Local\wpkm\packages\milli
█
SHA3-512Verified packages
3–5sTypical publish path
GOSHA3-512GITHUB NATIVEZIP AWARENO BLOATWINDOWS
The whole idea

Small enough to understand.

WPKM keeps the core workflow visible. Find something, install it, remove it, publish it, inspect it.

⌁

Minimal CLI

A focused command set instead of a command jungle. The important stuff stays obvious.

See commands →
#

SHA3-512

Downloaded payloads are hashed and compared before installation. No silent mismatch roulette.

Read security docs →
↗

GitHub-native

Packages land in a Git-backed registry through pull requests and automated verification.

How publishing works →
▦

ZIP-aware

ZIP payloads are verified, securely extracted, and the archive itself is not left behind.

ZIP behavior →
Registry

A package registry you can actually look at.

Every package is represented by a small, understandable structure: a manifest, a payload, and its SHA3-512 record.

Explore the registry →
packages/
└── Milli/
    ├── manifest.json
    ├── milli.exe
    └── SHA3-512
✓ readable
✓ hash verified
✓ Git-backed
Current registry

Useful stuff first.

See all packages →
Different by design

WPKM does not need to be everything.

WinGet, Scoop, Chocolatey, APT, and Pacman all solve broader package-management problems. WPKM chooses a narrower shape and commits to it.

Compare approaches
Ready?

Open a terminal. Make it useful.

Install WPKM, grab a package, and get moving.