EXTENSIONS

Run a Sonatype Nexus Repository instance with Docker or Apple's container CLI, configured far enough that the onboarding wizard never appears, then declare what goes in it: realms, blob stores, roles, users, and apt, docker, npm, pypi and raw repositories (hosted, proxy and group). apply creates and updates them in dependency order and can prune what is not declared; sync reports drift without changing anything. Pre-flight checks catch a stopped runtime, a taken port and typos in privileges or references before anything changes.

Finds the oldest-touched installed dpkg packages on a Debian/apt-based host, using each package's /var/lib/dpkg/info/<name>.list file mtime as an approximate (honestly-caveated) install date — fun trivia about your system's history.

Observes APT package inventory and pending upgrades on Debian/apt-based Linux, with security-update classification, versioned delta reporting, debsecan CVE cross-checking, and a safety-gated install/remove for verified security updates. Verified on Raspberry Pi 5 / Debian 13 trixie, arm64.