WPKM
For maintainers

Put a package on the shelf.

WPKM turns a local binary or ZIP into a GitHub pull request with a manifest and a verified hash.

01

Pick a file

WPKM accepts ordinary package payloads, including ZIP archives.

wpkm push app.exe
02

Hash it

The client computes SHA3-512 and records it in the manifest.

SHA3-512 → manifest
03

Create PR

The registry receives a structured package pull request.

GitHub Pull Request
04

Verify & merge

GitHub Actions compares the package payload against the declared hash.

MATCH → AUTO-MERGE
Command

One line does the publishing.

You provide the package. WPKM handles the registry mechanics.

wpkm push milli.exe
Manifest

Keep metadata boring.

That is a compliment.

{
  "name": "milli",
  "version": "0.1.0",
  "description": "WPKM package",
  "architecture": "amd64",
  "binary": "milli.exe",
  "sha3-512": "..."
}
Size limit

Keep payloads under 100 MiB.

The current registry stores payloads as Git-backed files. Individual GitHub Git files are limited to 100 MiB.

0 MiB50 MiB100 MiB
Need the source?

Everything is visible.

Use the client repository for implementation and the registry repository for package structure.

Client ↗Registry ↗