Reproducible External Data Dependencies R package getaca version 0.1.6 Declares, retrieves, verifies, tracks and actively manages external data dependencies too large or too fast-moving to ship inside a package. Resources are identified by package, name and version, pinned to a Secure Hash Algorithm (SHA-256) checksum, and resolved through an explicit policy so that the same installed package always resolves the same bytes. A registry served from a remote host may be signed with Ed25519 and verified against a key the declaring package ships, so the declaration and the key that vouches for it arrive by different routes. Hashing follows National Institute of Standards and Technology (2015) "Secure Hash Standard" <doi:10.6028/NIST.FIPS.180-4>; signing follows Bernstein, Duif, Lange, Schwabe and Yang (2012) "High-Speed High-Security Signatures" <doi:10.1007/s13389-012-0027-1> and Josefsson and Liusvaara (2017) "Edwards-Curve Digital Signature Algorithm (EdDSA)" <doi:10.17487/RFC8032>. Designed for reproducible offline use and graceful behaviour during package checks. Software Depends: R (>= 4.0.0) Imports: curl (>= 5.0.0), stats, tools, utils Suggests: jsonlite, knitr, rmarkdown, testthat (>= 3.0.0), withr, yaml Gilles Colling <gilles.colling051@gmail.com> Comprehensive R Archive Network (CRAN) Gilles Colling [aut, cre, cph] (ORCID: <https://orcid.org/0000-0003-3070-6066>), Daniel J. Bernstein [ctb] (TweetNaCl, from which src/ed25519.c derives), Bernard van Gastel [ctb] (TweetNaCl, from which src/ed25519.c derives), Wesley Janssen [ctb] (TweetNaCl, from which src/ed25519.c derives), Tanja Lange [ctb] (TweetNaCl, from which src/ed25519.c derives), Peter Schwabe [ctb] (TweetNaCl, from which src/ed25519.c derives), Sjaak Smetsers [ctb] (TweetNaCl, from which src/ed25519.c derives) MIT + file LICENSE (https://CRAN.R-project.org/package=getaca/LICENSE) 2026-09-01 application/tgz https://CRAN.R-project.org/package=getaca doi:10.32614/CRAN.package.getaca en-GB