cpm-cmake/CPM.cmake
CPM.cmake
CPM.cmake is a dependency manager and package resolver for C and C++ projects that integrates directly into the CMake build system. It automates the process of fetching, configuring, and managing external libraries by resolving dependencies through system-wide package managers or by downloading source code from remote repositories.
The system ensures reproducible builds by locking transitive dependency versions and verifying the authenticity of downloaded source archives using cryptographic hash checksums. It allows for development flexibility through local filesystem overrides, which redirect remote dependencies to local paths, and sequential source patching to modify dependency behavior without altering the original codebase.
Broad capabilities include version resolution via semantic tags or commit hashes, local caching of dependency sources to reduce network overhead, and the application of custom build flags and options during the configuration of third-party projects.
Features
- Remote Dependency Integration - Automates the downloading and integration of external libraries from remote repositories into the build system.
- CMake-Based Managers - Acts as a comprehensive dependency manager and package resolver integrated directly into the CMake build system.
- Dependency Lock Managers - Generates lock files to fix versions of all transitive dependencies for reproducible builds.
- Dependency Resolvers - Implements logic for calculating and fetching dependency graphs to resolve transitive library versions.
- Remote Version Resolution - Resolves specific library versions by fetching tags or commit hashes directly from remote Git repositories.
- Package Dependency Managers - Resolves third-party dependencies by checking system-wide package managers before falling back to automated source downloads.
- Reproducible Build Environments - Ensures consistent builds across environments by locking transitive dependency versions and verifying source integrity.
- Third-Party Source Integration - Downloads and configures third-party projects from any source without requiring modifications to the original codebase.
- CMake Integrations - Provides a CMake script that automates the retrieval and inclusion of external project source code.
- Dependency Management - Provides an automated system for fetching and configuring external C++ libraries directly through CMake.
- Semantic Versioning Systems - Uses semantic versioning and release tags to integrate libraries and ensure deterministic builds.
- System Package Manager Integrations - Locates dependencies via system-wide package managers before falling back to downloading from source.
- C++ Package Orchestration - Manages the lifecycle of third party C++ dependencies by checking system installations before downloading from source.
- External Library Installers - Downloads and configures external source code from remote repositories using specific version tags or commit hashes.
- Fallback Resolution Strategies - Attempts to find packages via system-wide managers before falling back to automated source downloads.
- Package Dependency Resolution - Locates required packages by checking for global installations before falling back to automated fetching.
- Dependency Build Options - Passes build settings and flags to a dependency during configuration to toggle features or disable components.
- Dependency Caches - Stores downloaded packages in a local directory to speed up build times and ensure consistent environments.
- Post-Download Patching - Executes a sequence of patch files against dependency source code immediately after downloading to modify behavior.
- Local Dependency Caching - Implements local caching of downloaded dependencies to reduce network overhead and ensure build consistency.
- Local Dependency Linkers - Redirects dependencies to absolute local paths to test changes without updating remote sources.
- Local Source Overrides - Allows redirecting remote dependency resolution to a local filesystem path for iterative development.
- Download Integrity Verification - Validates the authenticity of downloaded source archives by comparing file hashes against trusted checksums.
- Post-Download Integrity Checks - Validates the authenticity of downloaded source archives using cryptographic hash checksums to ensure supply chain security.
- Patch Application - Applies a series of external patch files to downloaded source code before configuration.
