Raiku is an open-source, community-driven package manager that uses GitHub as its registry — no proprietary server, no sign-up required. Every package lives directly inside the SGizek/Raiku repository underDocumentation Index
Fetch the complete documentation index at: https://mintlify.com/SGizek/Raiku/llms.txt
Use this file to discover all available pages before exploring further.
UserSub/<Language>/, and anyone can contribute by opening a pull request. When you run raiku install, the CLI reads a locally cached index.json (synced from GitHub) to locate the package, then fetches only the files it needs using raw GitHub URLs — meaning you never clone the entire monorepo just to install a single library. SHA-256 hash verification and a safe-mode build prompt protect you at every step.
Supported Languages
Raiku covers eight languages out of the box. Each has its own subdirectory in the registry and its own scaffolding template viaraiku init.
Python
UserSub/Python/Rust
UserSub/Rust/C
UserSub/C/C++
UserSub/CPP/Zig
UserSub/Zig/Java
UserSub/Java/C#
UserSub/CSharp/Go
UserSub/Go/How the Ecosystem Works
Raiku separates the index from the packages to keep installs fast and bandwidth-light.raiku syncfetches the singleindex/index.jsonfile fromhttps://raw.githubusercontent.com/SGizek/Raiku/main/index/index.jsonand saves it to~/.raiku/index.json. This is the only time the full index is downloaded.raiku install <package>reads your localindex.json, resolves transitive dependencies, and fetches only the required files for each package using individual raw GitHub URLs —raiku.toml,version.yml,README.md, and the contents ofsrc/.- Files are cached at
~/.raiku/cache/<Language>/<name>/<version>/so repeat installs are instant. - The SHA-256 hash of every downloaded file is verified against the index entry before anything is executed.
Repository Layout
The Raiku repository is a monorepo that acts as both the CLI source and the package registry.UserSub/ follows a consistent four-file structure:
Key Design Principles
Community-driven, no central server. The GitHub repository is the registry. Pull requests are the publishing mechanism. There is no proprietary backend that can go offline or change its terms. Selective fetching. The CLI never clones the repository. It downloads only theindex.json during sync, then fetches individual package files on demand. This keeps installs fast even as the registry grows.
SHA-256 integrity. Every package’s hash is recorded in index.json and re-verified at install time. raiku audit re-checks every file in your local cache at any time.
Safe mode builds. Before executing any build command, Raiku displays the full command and waits for your explicit approval (safe_mode = true by default). A static blocklist of dangerous shell patterns — including rm -rf, eval(, and subprocess.Popen — is scanned before any command runs, regardless of safe mode.
Reproducible installs. raiku install <pkg> --lock records exact installed versions and their hashes in raiku.lock. Commit this file to guarantee identical installs across machines and CI environments.
Explore Raiku
Quickstart
Install the CLI and get your first package running in under two minutes.
CLI Reference
Full reference for every Raiku command, flag, and option.
Security
How SHA-256 verification, safe mode, and the forbidden-pattern scan protect you.
Contributing
Scaffold a package with
raiku init and open your first PR.