Socket
Socket
Sign inDemoInstall

4q

Package Overview
Dependencies
25
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    4q

the 4q archive format


Version published
Weekly downloads
3
decreased by-25%
Maintainers
1
Created
Weekly downloads
 

Readme

Source

4Q

4Q: the final archive format.

4Q is a data & file format for archiving collections of files & folders, like "tar", "zip", and "winrar". Its primary differentiating features are:

  • All important unix/posix attributes are preserved (owner, group, permissions, create/modify timestamps).
  • The format is streamable: Files may be unpacked as an archive is read, and an archive may be written with minimal buffering.
  • Compression may occur per-file or over the whole archive, using snappy (very fast) or LZMA2 (very compact).
  • Modern crypto is used: SHA-512 for verification, and AES-256 for encryption. Encryption uses the keybase.io registry (and library).

Status

As of today (January 2015), I'm pretty satisfied with the data format, so it's unlikely to change, but I reserve the right to make some last-minute adjustments over the next few months if I feel they're necessary. When I bump the version to 1.0, I'll promise not to change the underlying data format anymore, which should ensure all archive files are supported from then on.

There are some missing features that I'd like (listed in the TODO section below). Most are small things, but being able to (cryptographically) sign an archive is one feature I'd like to finish before declaring 1.0 victory. If you have any pet features (or bugs) that you consider a hard requirement, let me know, so I can take that into consideration.

Usage

All of the command-line tools respond to --help.

To create an archive of the folder myfiles, called myfiles.4q:

$ qpack myfiles

To encrypt a folder of source code for keybase user robey, into an archive named secret.4q:

$ qpack -e robey -o secret.4q src/main/wibble/

To list the files in an archive called myfiles.4q:

$ qls myfiles.4q

To unpack the archive secret.4q into a new temporary folder:

$ qunpack secret.4q -o temp

TODO

  • signed bottles
  • support symbolic links
  • force-overwrite mode for qunpack
  • qunpack should preserve ownership by default when running as root
  • qunpack should have an option to ignore ownership, and one to ignore permissions
  • sparse files

Keywords

FAQs

Last updated on 11 Jan 2015

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc