{"id":37121826,"url":"https://github.com/agentd/squashfs-tools-ng","last_synced_at":"2026-01-14T14:01:24.855Z","repository":{"id":36140516,"uuid":"190920448","full_name":"AgentD/squashfs-tools-ng","owner":"AgentD","description":"A new set of tools and libraries for working with SquashFS images","archived":false,"fork":false,"pushed_at":"2024-09-26T14:13:11.000Z","size":4222,"stargazers_count":219,"open_issues_count":13,"forks_count":30,"subscribers_count":11,"default_branch":"master","last_synced_at":"2025-08-06T01:32:42.805Z","etag":null,"topics":["filesystem","libsquashfs","linux","lzo","mkfs","mksquashfs","sqfs2tar","squashfs","squashfs-image","tar","tar2sqfs","tarball","zstd"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/AgentD.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"COPYING.md","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-06-08T18:13:34.000Z","updated_at":"2025-07-01T14:37:21.000Z","dependencies_parsed_at":"2024-03-24T00:19:26.732Z","dependency_job_id":"c033d6bd-74a5-49df-842d-6dd7311a3e1e","html_url":"https://github.com/AgentD/squashfs-tools-ng","commit_stats":null,"previous_names":[],"tags_count":29,"template":false,"template_full_name":null,"purl":"pkg:github/AgentD/squashfs-tools-ng","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AgentD%2Fsquashfs-tools-ng","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AgentD%2Fsquashfs-tools-ng/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AgentD%2Fsquashfs-tools-ng/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AgentD%2Fsquashfs-tools-ng/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/AgentD","download_url":"https://codeload.github.com/AgentD/squashfs-tools-ng/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/AgentD%2Fsquashfs-tools-ng/sbom","scorecard":{"id":9240,"data":{"date":"2025-08-11","repo":{"name":"github.com/AgentD/squashfs-tools-ng","commit":"e3dcf1770fd77a0babcca422dcbe7b2cc7b8ab90"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/30 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/AgentD/squashfs-tools-ng/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/AgentD/squashfs-tools-ng/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/AgentD/squashfs-tools-ng/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/AgentD/squashfs-tools-ng/codeql-analysis.yml/master?enable=pin","Warn: containerImage not pinned by hash: packages/Dockerfile:17","Info:   0 out of   4 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: COPYING.md:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 1 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-14T14:11:46.571Z","repository_id":36140516,"created_at":"2025-08-14T14:11:46.571Z","updated_at":"2025-08-14T14:11:46.571Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28422402,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T13:30:50.153Z","status":"ssl_error","status_checked_at":"2026-01-14T13:29:08.907Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["filesystem","libsquashfs","linux","lzo","mkfs","mksquashfs","sqfs2tar","squashfs","squashfs-image","tar","tar2sqfs","tarball","zstd"],"created_at":"2026-01-14T14:01:24.154Z","updated_at":"2026-01-14T14:01:24.847Z","avatar_url":"https://github.com/AgentD.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# About\n\nSquashFS is a highly compressed, read only file system often used as a root fs\non embedded devices, live systems or simply as a compressed archive format.\n\nThink of it as a .tar.gz that you can mount (or XZ, LZO, LZ4, ZSTD).\n\nThis project originally started out as a fork of squashfs-tools 4.3, after\nencountering some short comings and realizing that there have been no updates\non the SourceForge site or mailing list for a long time. Even before the first\npublic release, the fork was replaced with a complete re-write after growing\nfrustrated with the existing code base. For lack of a better name, and because\nthe original appeared to be unmaintained at the time, the name squashfs-tools-ng\nwas kept, although the published code base technically never had any connection\nto squashfs-tools.\n\nMaintenance of the original squashfs-tools has since resumed, squashfs-tools\nversion 4.4 was released and continues to be maintained in parallel. The\nutilities provided by squashfs-tools-ng offer alternative tooling and are\nintentionally named differently, so both packages can be installed side by\nside.\n\nThe actual guts of squashfs-tools-ng are encapsulated in a library with a\ngeneric API designed to make SquashFS available to other applications as an\nembeddable, extensible archive format (or to simply read, write or manipulate\nSquashFS file systems).\n\nThe utility programs are largely command line wrappers around the library. The\nfollowing tools are provided:\n\n - `gensquashfs` can be used to produce SquashFS images from `gen_init_cpio`\n   like file listings or simply pack an input directory. Can use an SELinux\n   contexts file (see selabel_file(5)) to generate SELinux labels.\n - `rdsquashfs` can be used to inspect and unpack SquashFS images.\n - `sqfs2tar` can turn a SquashFS image into a tarball, written to stdout.\n - `tar2sqfs` can turn a tarball (read from stdin) into a SquashFS image.\n - `sqfsdiff` can compare the contents of two SquashFS images.\n\nThe library and the tools that produce SquashFS images are designed to operate\ndeterministically. Same input will produce byte-for-byte identical\noutput. Failure to do so is treated as a critical bug.\n\n# Installing\n\nA number of Linux distributions already offer squashfs-tools-ng through their\npackage management system. Replogy maintains an up to date list:\n\n[![Packaging status](https://repology.org/badge/vertical-allrepos/squashfs-tools-ng.svg)](https://repology.org/project/squashfs-tools-ng/versions)\n\n## Pre-built Windows binary Packages\n\nPre-compiled binary packages for Windows are available here:\n\nhttps://infraroot.at/pub/squashfs/windows\n\nThose packages contain the binaries for the tools, the SquashFS library\nand pre-compiled dependency libraries (zstd, lzo, lzma; others are built in).\n\nThe binary package does not contain any source code. See below on how to obtain\nand compile the source for squashfs-tools-ng. The corresponding source code\nfrom which the 3rd party libraries have been built is also available for\ndownload at the above location.\n\nThe headers and import libraries to build applications that use libsquashfs are\nincluded. For convenience, the pre-compiled, 3rd party dependency libraries\nalso come with headers and import libraries.\n\n# Copyright \u0026 License\n\nIn short: libsquashfs is LGPLv3 licensed, the utility programs are GPLv3.\n\nSome 3rd party source code is included with more permissive licenses, some of\nwhich is actually compiled into libsquashfs. Copyright notices for those must\nbe included when distributing either source or binaries of squashfs-tools-ng.\n\nSee [COPYING.md](COPYING.md) for more detailed information.\n\n# Package Versioning and Git Branches\n\nThis package attempts to use [Semantic Versioning](https://semver.org/spec/v2.0.0.html).\nA [changelog](CHANGELOG.md) is maintained that summarizes changes between releases.\n\nReleases are tagged and gpg signed in the git tree and official release tarballs\nare generated using Autotools.\n\nThe git `master` branch currently contains ongoing development for a\nfuture `2.0` release.\n\nThe latest stable version is `1.2.0`, maintained in a `fixes-1.2.0` branch.\n\nBug fixes that also affect the previous `1.1.0` minor version are back-ported to\na `fixes-1.1.0` branch with occasionally patch level releases. The latest\nrelease from this branch is `1.1.4`.\n\nOlder versions are no longer supported. Fixes were previously backported to\nthe `fixes-1.0.0` branch, the final release is `1.0.7`.\n\nIt is likely that support for `1.1.x` will also be dropped after version `2.0`.\n\n# Getting and Building the Source Code\n\nOfficial release tarballs can be obtained here:\n\nhttps://infraroot.at/pub/squashfs\n\nIn between patch level releases, bug fixes are continuously published as\nindividual patch files in `fixes-\u003cversion\u003e` directories.\n\nThe official git tree is available at the following locations:\n\nhttps://github.com/AgentD/squashfs-tools-ng\n\nhttps://git.infraroot.at/squashfs-tools-ng.git\n\nThose locations are kept in sync and the former is a GitHub project that also\naccepts and handles issues \u0026 pull requests.\n\nIf you are working on an official release tarball, you can build the package\nlike every autotools based package:\n\n\t./configure\n\tmake\n\tmake install\n\nIf you work on the git tree, you need to bootstrap the build system first:\n\n\t./autogen.sh\n\nIf Doxygen is available, a reference manual can be built as follows:\n\n\tmake doxygen-doc\n\nThe pre-compiled binary packages for Windows are built using a helper script\nthat uses a MinGW cross toolchain to build squashfs-tools-ng and any of the\nrequired dependencies:\n\n\t./mkwinbins.sh\n\nAn high-level overview of the source code and\narchitecture [can be found here](doc/architecture.md).\n\n## A Note on LZO Support\n\nThe SquashFS format supports compression using LZO. The `liblzo2` library\nitself is released under the GNU GPL, version 2.\n\nTo make the `libsquashfs` library available as an LGPL library, it *cannot* be\nlinked against `liblzo2`, neither statically nor dynamically.\n\nThis legal problem has been solved using the following technical measure:\n\n - `libsquashfs`, as of right now, does not support LZO compression.\n - The `libcommon` helper library has an implementation of an `liblzo2` based\n   compressor. This library and the tools that use it are released under\n   the GPL.\n\nThis way, the tools themselves *do* support LZO compression seamlessly, while\nthe `libsquashfs` library does not.\n\n## Automated Testing and Analysis\n\n[![Build Status](https://travis-ci.com/AgentD/squashfs-tools-ng.svg?branch=master)](https://travis-ci.com/AgentD/squashfs-tools-ng)\n[![Coverity Status](https://scan.coverity.com/projects/18718/badge.svg)](https://scan.coverity.com/projects/squashfs-tools-ng)\n\nThe GitHub project for squashfs-tools-ng is registered with Travis-CI and\nCoverity Scan.\n\nThe [Travis-CI](https://travis-ci.com/github/AgentD/squashfs-tools-ng) page\nshows the current build status for various system configurations for the\nlatest commit on master, as well as pull requests on the GitHub project page.\n\nThe [Coverity Scan](https://scan.coverity.com/projects/squashfs-tools-ng) page\nshows details for static analysis runs on the code, which are triggered\nmanually and thus run less frequently.\n\n## Further Information\n\nA documentation of the SquashFS on-disk format in plain text format can be\nfound in the [documentation directory](doc/format.txt), which is based on\nan online version that can be found here:\n\nhttps://dr-emann.github.io/squashfs/\n\n\nThe closest thing to an official web site can be found here:\n\nhttps://infraroot.at/projects/squashfs-tools-ng/index.html\n\nThis location also hosts the Doxygen reference manual for the latest release.\n\nThere is currently no official mailing list. So far I used the squashfs-tools\nmailing list on SourceForge for announcements and I will continue to do so\nuntil I am booted off.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fagentd%2Fsquashfs-tools-ng","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fagentd%2Fsquashfs-tools-ng","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fagentd%2Fsquashfs-tools-ng/lists"}