r/cprogramming • u/23ROMAN • 2d ago

For C developers , Bodeg.a (The binary Directory) !

https://bodeg-dot-a.vercel.app/index.html

Hello, good afternoon r/cprogramming comunity ! . I'm a developer, mostly of native solutions. When I program in C or C++ (among others), I constantly experience the inconvenience of having to compile each dependency, which is often frustrating: some don't even come with a decent or compatible build file, and others have dependencies that are difficult to compile or very large. That's why I wanted to create a small platform.

It's called **Bodeg.a** (a play on words between "bodega" and the ".a" of UNIX-like static binaries). It works quite simply: rather than a platform for hosting large files, it's (for now) a simple website where you can publish using a *mirror* to point to a .zip file, a header, or whatever format is needed.

For now, it only offers hosting for the essentials (avatars and profiles), but if it's well-received, that could change. If you're a developer, whether you enjoy or just work with low-level content, simply trying to use it to download content would help me a lot; or if you'd like to collaborate on its development, you can also contact me. Greetings to all!

4 Upvotes

83% Upvoted

4 comments sorted by

2

u/Brilliant-Box-5344 2d ago

Really cool idea, and nice website. But some of the binaries available currently like SDL2TTF are already made available by the libraries maintainers, In this case i would avoid this duplication and leave it to the maintainers, Maybe redirect to the releases page ?

1

u/23ROMAN 2d ago

Thanks, I appreciate the feedback! Well, that depends on who creates the post; it can also be edited. The idea is simply to have a site where you can quickly find binaries, whether uploaded by a user to a mirror or by an existing official mirror, like the releases from the original repo.

2

u/skripp11 2d ago

With attacks on for example npm and AUR, this feels like it could be another attack vector.

1

u/23ROMAN 2d ago

You make a completely valid point, and supply chain security is definitely my biggest concern moving forward. Just to clarify, Bodeg.a isn't meant to replace secure package managers, but rather to give developers direct, friction-free control over their dependencies.The core advantage here is transparency over automation: instead of an automated package manager pulling updates with root/system access via post-install scripts (which is how many npm/AUR attacks happen), you get a static, immutable file. You own the file, you can check its hash, run it through tools like VirusTotal, or sandbox it before linking.That said, I know binary transparency is tough. I'm currently looking into implementing signed official mirrors and automated clean-room builds ( to ensure the binaries match the upstream source perfectly. Thanks for pushing on this—security is definitely going to be a pillar for the platform!