> It is an alternative to `.sfv` files and tools like `shasum`

why?

Is

```bash
(find . -type f | xargs -n1 sha256sum) > SHASUMS
gpg --clearsign SHASUMS
```

broken?

optimism

It allows you to create manifests for directories with a fingerprint/merkle root that can be signed. It also specifies a metadata file standard.

 (manifest), but modern times call for modern measures.

I'd probably do something more like what git does (a few binary object types to make up a tree), maybe even something exactly like git so that filepacks could get updated via commits, evolve, and carry history. But I also don't have 30k github stars on any of my repos.

tech

devs

A neat thing from the ordinals and [just](https://github.com/casey/just) guy, @rodarmor.

It allows you to create manifests for directories with a fingerprint/merkle root that can be signed. It also specifies a metadata file standard.

I don't love mixing `yaml` (metadata) and `json` (manifest), but modern times call for modern measures. 

I'd probably do something more like what git does (a few binary object types to make up a tree), maybe even something exactly like git so that filepacks could get updated via commits, evolve, and carry history. But I also don't have 30k github stars on any of my repos.