huntedbytheirs c876821cda feat(index): fetch and sandbox-parse ZUUR index.lua
- Module tofu.index: download index via tofu.http.get, sandbox parse via Lua subprocess
- Whitelist sandbox (ported from ZETA lib/sandbox.lua): index code has zero I/O/exec access
- Lua 5.1/5.2+ compatible: setfenv detection with fallback to load() env param
- JSON escaping: handles quotes, backslashes, control characters in string values
- Defensive parsing: skips entries with empty names or invalid pool values
- 10 unittest blocks: happy path, malicious os.execute/io.open blocked, lua not found, bad JSON, empty index, missing name skip, invalid pool skip, syntax error, string escaping
- Evidence: 7 modules pass unittests, dub build passes with warnings-as-errors
2026-08-08 17:37:59 -04:00
2026-08-08 16:11:02 -04:00

tofu

A package manager for the ZereneOS Unofficial User Repository

What it is

A Dlang wrapper around zeta-toolchain and ZETA for the ZUUR recipe repository, in the style of yay/paru for the ZereneOS ecosystem.

Requirements

  • dub
  • a D compiler (dmd or ldc2)
  • lua
  • curl
  • zeta-toolchain
  • Zeta

Build

dub build

Produces the ./tofu binary.

S
Description
A package manager for the ZereneOS Unofficial User Repository
Readme BSD-3-Clause
241 KiB
Languages
D 97.3%
Shell 2.7%