Paco - Godot Asset Store
store.godotengine.org
The tiny package manager

Paco is a free tiny package manager that provides a safer way to manage dependencies by downloading and installing packages from a trusted and predefined array rather than shipping addons and / or binaries directly with the project.

It’s pretty much like Python, Go, or Ruby, where project dependencies can be installed from a list of packages and versions.

We’d love to get any feedback on this and know what you’d like to see improved

Thanks! 👋

  • RelativityRanger
    2·
    3 days ago

    The point is that a bad actor might be able to put themselves between your repository and the exact package version you’re attempting to download

    Everyone agree on this too and OP clearly mentionned checksums after you suggested a check and that’s what should be implemented so that looks pretty fine too me. I like good endings :)