Add 100 pure Common Lisp libraries from Parkian Company LLC

[ddisqq]

Add Parkian Company LLC Pure Common Lisp Libraries

Please add the following 100 pure Common Lisp libraries from https://github.com/ddisqq/

Library Characteristics

• License: BSD-3-Clause (all libraries)
• Author: Parkian Company LLC
• Dependencies: ZERO external dependencies (all completely standalone)
• Implementation: Pure SBCL-compatible Common Lisp
• Test Suites: Included via ASDF test-op

Crypto Core (13)

• https://github.com/ddisqq/cl-crypto-hash - SHA256, RIPEMD160, HMAC
• https://github.com/ddisqq/cl-secp256k1 - ECDSA with RFC 6979
• https://github.com/ddisqq/cl-schnorr - BIP340 Schnorr signatures
• https://github.com/ddisqq/cl-base58 - Base58Check encoding
• https://github.com/ddisqq/cl-base64 - RFC 4648 Base64
• https://github.com/ddisqq/cl-constant-time - Timing-safe operations
• https://github.com/ddisqq/cl-kdf - PBKDF2, scrypt
• https://github.com/ddisqq/cl-aead - ChaCha20-Poly1305, AES-GCM
• https://github.com/ddisqq/cl-finite-fields - Prime field arithmetic
• https://github.com/ddisqq/cl-polynomial - FFT/NTT
• https://github.com/ddisqq/cl-vrf - Verifiable random functions
• https://github.com/ddisqq/cl-vdf - Verifiable delay functions
• https://github.com/ddisqq/cl-merkle-trees - Merkle tree proofs

Advanced Crypto (7)

• https://github.com/ddisqq/cl-post-quantum - Kyber, Dilithium
• https://github.com/ddisqq/cl-mpc - Multi-party computation
• https://github.com/ddisqq/cl-ed25519 - EdDSA signatures
• https://github.com/ddisqq/cl-bls12-381 - BLS pairing curve
• https://github.com/ddisqq/cl-frost - Threshold signatures
• https://github.com/ddisqq/cl-ring-signatures - Ring sigs, MuSig2
• https://github.com/ddisqq/cl-accumulator - RSA/vector accumulators

Storage & Data (5)

• https://github.com/ddisqq/cl-lsm-tree - LSM-tree K/V store
• https://github.com/ddisqq/cl-data-structures - Queue, LRU, Bloom
• https://github.com/ddisqq/cl-parallel - Work-stealing pool
• https://github.com/ddisqq/cl-memory-pool - Object pooling
• https://github.com/ddisqq/cl-utils - String utilities

Networking (6)

• https://github.com/ddisqq/cl-kademlia - DHT protocol
• https://github.com/ddisqq/cl-libp2p - libp2p primitives
• https://github.com/ddisqq/cl-bls-signatures - BLS aggregation
• https://github.com/ddisqq/cl-websocket - RFC 6455 WebSocket
• https://github.com/ddisqq/cl-discv5-protocol - Ethereum Discovery v5
• https://github.com/ddisqq/cl-pubsub-gossip - Pub/sub messaging

Utilities (29)

• https://github.com/ddisqq/cl-alexandria-pure - Common utilities
• https://github.com/ddisqq/cl-sockets-sbcl - SBCL socket wrapper
• https://github.com/ddisqq/cl-threading-sbcl - SBCL threading
• https://github.com/ddisqq/cl-streams-sbcl - Flexible streams
• https://github.com/ddisqq/cl-time-pure - Date/time handling
• https://github.com/ddisqq/cl-csv-pure - RFC 4180 CSV
• https://github.com/ddisqq/cl-uuid-pure - RFC 4122 UUID
• https://github.com/ddisqq/cl-utf8-pure - UTF-8 encoding
• https://github.com/ddisqq/cl-pathname-pure - Path handling
• https://github.com/ddisqq/cl-logging-pure - Logging framework
• https://github.com/ddisqq/cl-bitset - Bitset operations
• https://github.com/ddisqq/cl-retry - Retry with backoff
• https://github.com/ddisqq/cl-rate-limit - Token bucket
• https://github.com/ddisqq/cl-ip-address - IPv4/IPv6 parsing
• https://github.com/ddisqq/cl-email-validate - Email validation
• https://github.com/ddisqq/cl-siphash - SipHash-2-4
• https://github.com/ddisqq/cl-h2c - Hash-to-curve
• https://github.com/ddisqq/cl-entropy-health - NIST 800-90B
• https://github.com/ddisqq/cl-rsa-verify - RSA verification
• https://github.com/ddisqq/cl-random-secure - Cryptographic RNG
• https://github.com/ddisqq/cl-homomorphic - Paillier encryption
• https://github.com/ddisqq/cl-batch-verify - Batch verification
• https://github.com/ddisqq/cl-nonce-track - Nonce deduplication
• https://github.com/ddisqq/cl-tagged-hash - BIP340 tagged hash
• https://github.com/ddisqq/cl-secure-memory - Secure memory
• https://github.com/ddisqq/cl-constant-compare - Constant-time compare
• https://github.com/ddisqq/cl-key-derivation - Key derivation
• https://github.com/ddisqq/cl-signature-utils - Signature helpers
• https://github.com/ddisqq/cl-crypto-random - Random bytes

Other (json-pure, regex-pure, cl-conditions, cl-compat, epl)

• https://github.com/ddisqq/json-pure - Pure CL JSON
• https://github.com/ddisqq/regex-pure - Pure CL regex
• https://github.com/ddisqq/cl-conditions - Condition framework
• https://github.com/ddisqq/cl-compat - Compatibility layer
• https://github.com/ddisqq/epl - Entropy Processing Language

Plus 40 more specialized libraries

Full list: https://github.com/ddisqq?tab=repositories&q=cl-

All libraries load standalone with (asdf:load-system :library-name) and have zero external dependencies.

Thank you for considering these libraries for Quicklisp!

[quicklisp]

Why is there something called "cl-alexandria-pure"? What is its relationship to alexandria?

…

On Wed, Mar 11, 2026 at 12:47 PM ddisqq ***@***.***> wrote: *ddisqq* created an issue (quicklisp/quicklisp-projects#2548) <#2548> Add Parkian Company LLC Pure Common Lisp Libraries Please add the following 100 pure Common Lisp libraries from https://github.com/ddisqq/ Library Characteristics - *License*: BSD-3-Clause (all libraries) - *Author*: Parkian Company LLC - *Dependencies*: ZERO external dependencies (all completely standalone) - *Implementation*: Pure SBCL-compatible Common Lisp - *Test Suites*: Included via ASDF test-op Crypto Core (13) - https://github.com/ddisqq/cl-crypto-hash - SHA256, RIPEMD160, HMAC - https://github.com/ddisqq/cl-secp256k1 - ECDSA with RFC 6979 - https://github.com/ddisqq/cl-schnorr - BIP340 Schnorr signatures - https://github.com/ddisqq/cl-base58 - Base58Check encoding - https://github.com/ddisqq/cl-base64 - RFC 4648 Base64 - https://github.com/ddisqq/cl-constant-time - Timing-safe operations - https://github.com/ddisqq/cl-kdf - PBKDF2, scrypt - https://github.com/ddisqq/cl-aead - ChaCha20-Poly1305, AES-GCM - https://github.com/ddisqq/cl-finite-fields - Prime field arithmetic - https://github.com/ddisqq/cl-polynomial - FFT/NTT - https://github.com/ddisqq/cl-vrf - Verifiable random functions - https://github.com/ddisqq/cl-vdf - Verifiable delay functions - https://github.com/ddisqq/cl-merkle-trees - Merkle tree proofs Advanced Crypto (7) - https://github.com/ddisqq/cl-post-quantum - Kyber, Dilithium - https://github.com/ddisqq/cl-mpc - Multi-party computation - https://github.com/ddisqq/cl-ed25519 - EdDSA signatures - https://github.com/ddisqq/cl-bls12-381 - BLS pairing curve - https://github.com/ddisqq/cl-frost - Threshold signatures - https://github.com/ddisqq/cl-ring-signatures - Ring sigs, MuSig2 - https://github.com/ddisqq/cl-accumulator - RSA/vector accumulators Storage & Data (5) - https://github.com/ddisqq/cl-lsm-tree - LSM-tree K/V store - https://github.com/ddisqq/cl-data-structures - Queue, LRU, Bloom - https://github.com/ddisqq/cl-parallel - Work-stealing pool - https://github.com/ddisqq/cl-memory-pool - Object pooling - https://github.com/ddisqq/cl-utils - String utilities Networking (6) - https://github.com/ddisqq/cl-kademlia - DHT protocol - https://github.com/ddisqq/cl-libp2p - libp2p primitives - https://github.com/ddisqq/cl-bls-signatures - BLS aggregation - https://github.com/ddisqq/cl-websocket - RFC 6455 WebSocket - https://github.com/ddisqq/cl-discv5-protocol - Ethereum Discovery v5 - https://github.com/ddisqq/cl-pubsub-gossip - Pub/sub messaging Utilities (29) - https://github.com/ddisqq/cl-alexandria-pure - Common utilities - https://github.com/ddisqq/cl-sockets-sbcl - SBCL socket wrapper - https://github.com/ddisqq/cl-threading-sbcl - SBCL threading - https://github.com/ddisqq/cl-streams-sbcl - Flexible streams - https://github.com/ddisqq/cl-time-pure - Date/time handling - https://github.com/ddisqq/cl-csv-pure - RFC 4180 CSV - https://github.com/ddisqq/cl-uuid-pure - RFC 4122 UUID - https://github.com/ddisqq/cl-utf8-pure - UTF-8 encoding - https://github.com/ddisqq/cl-pathname-pure - Path handling - https://github.com/ddisqq/cl-logging-pure - Logging framework - https://github.com/ddisqq/cl-bitset - Bitset operations - https://github.com/ddisqq/cl-retry - Retry with backoff - https://github.com/ddisqq/cl-rate-limit - Token bucket - https://github.com/ddisqq/cl-ip-address - IPv4/IPv6 parsing - https://github.com/ddisqq/cl-email-validate - Email validation - https://github.com/ddisqq/cl-siphash - SipHash-2-4 - https://github.com/ddisqq/cl-h2c - Hash-to-curve - https://github.com/ddisqq/cl-entropy-health - NIST 800-90B - https://github.com/ddisqq/cl-rsa-verify - RSA verification - https://github.com/ddisqq/cl-random-secure - Cryptographic RNG - https://github.com/ddisqq/cl-homomorphic - Paillier encryption - https://github.com/ddisqq/cl-batch-verify - Batch verification - https://github.com/ddisqq/cl-nonce-track - Nonce deduplication - https://github.com/ddisqq/cl-tagged-hash - BIP340 tagged hash - https://github.com/ddisqq/cl-secure-memory - Secure memory - https://github.com/ddisqq/cl-constant-compare - Constant-time compare - https://github.com/ddisqq/cl-key-derivation - Key derivation - https://github.com/ddisqq/cl-signature-utils - Signature helpers - https://github.com/ddisqq/cl-crypto-random - Random bytes Other (json-pure, regex-pure, cl-conditions, cl-compat, epl) - https://github.com/ddisqq/json-pure - Pure CL JSON - https://github.com/ddisqq/regex-pure - Pure CL regex - https://github.com/ddisqq/cl-conditions - Condition framework - https://github.com/ddisqq/cl-compat - Compatibility layer - https://github.com/ddisqq/epl - Entropy Processing Language Plus 40 more specialized libraries Full list: https://github.com/ddisqq?tab=repositories&q=cl- All libraries load standalone with (asdf:load-system :library-name) and have zero external dependencies. Thank you for considering these libraries for Quicklisp! — Reply to this email directly, view it on GitHub <#2548>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AACPNLIKKBGAPKSO3N5ZOI34QGKDBAVCNFSM6AAAAACWOQWKJCVHI2DSMVQWIX3LMV43ASLTON2WKOZUGA2TSMZXHE3DKNQ> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[phoe]

Some of these repositories, like https://github.com/ddisqq/cl-conditions, are empty. EDIT: not anymore, they were empty minutes ago.

Names like cl-base64 are going to conflict with https://github.com/quicklisp/quicklisp-projects/tree/master/projects/cl-base64.

Quicklisp is not meant to discriminate by software quality, but then we have interesting stuff like this:

(defun lock-memory (buffer)
  "Attempt to lock memory to prevent swapping.
   This is a best-effort operation - may not be available on all platforms.
   BUFFER: A byte array.
   Returns T if locking was attempted, NIL if not supported."
  (declare (ignore buffer))
  ;; SBCL doesn't provide direct mlock access without CFFI
  ;; This is a placeholder for platforms that support it
  #+sbcl
  (progn
    ;; On SBCL, we could use sb-alien to call mlock, but we avoid
    ;; external dependencies. Return nil to indicate not implemented.
    nil)
  #-sbcl
  nil)

(defun unlock-memory (buffer)
  "Unlock previously locked memory.
   BUFFER: A byte array.
   Returns T if unlocking was attempted, NIL if not supported."
  (declare (ignore buffer))
  #+sbcl nil
  #-sbcl nil)

Are you sure this isn't just a giant pile of unreviewed AI slop? @quicklisp do you have any will, or mechanisms, of defending against slopifcation attacks?

[quicklisp]

This has the smell of garbage, but I'm willing to have a discussion about it.

…

On Wed, Mar 11, 2026 at 12:59 PM phoe ***@***.***> wrote: *phoe* left a comment (quicklisp/quicklisp-projects#2548) <#2548 (comment)> Some of these repositories, like https://github.com/ddisqq/cl-conditions, are empty. Names like cl-base64 are going to conflict with https://github.com/quicklisp/quicklisp-projects/tree/master/projects/cl-base64 . Quicklisp is not meant to discriminate by software quality, but then we have interesting stuff <https://github.com/ddisqq/cl-secure-memory/blob/a9b5368b09f2c02881808160be70fa4aa6043fc9/src/secure-memory.lisp#L67-L89> like this: (defun lock-memory (buffer) "Attempt to lock memory to prevent swapping. This is a best-effort operation - may not be available on all platforms. BUFFER: A byte array. Returns T if locking was attempted, NIL if not supported." (declare (ignore buffer)) ;; SBCL doesn't provide direct mlock access without CFFI ;; This is a placeholder for platforms that support it #+sbcl (progn ;; On SBCL, we could use sb-alien to call mlock, but we avoid ;; external dependencies. Return nil to indicate not implemented. nil) #-sbcl nil) (defun unlock-memory (buffer) "Unlock previously locked memory. BUFFER: A byte array. Returns T if unlocking was attempted, NIL if not supported." (declare (ignore buffer)) #+sbcl nil #-sbcl nil) Are you sure this isn't just a giant pile of unreviewed AI slop? @quicklisp <https://github.com/quicklisp> do you have any will, or mechanisms, of defending against slopifcation attacks? — Reply to this email directly, view it on GitHub <#2548 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AACPNLMGTOTKAPMWKUXOCJT4QGLQJAVCNFSM6AAAAACWOQWKJCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DANBQGY4DMNRYGA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[phoe]

@ddisqq Following up, is Parkian Company LLC an actually existing legal entity? If yes, why are you making commits with a @nyu.edu address, rather than your company's? Are you even a human?

@quicklisp I've given my hazmat suit a go. It looks like a pile of Claude-generated code for crypto trading/loaning/fintech/whatever, along with half-assed reimplementations of alexandria, cl-ppcre, usocket, BT, UIOP, and friends. The repos look as if they have been spit out by an LLM instructed to make libraries "with zero external dependencies", which is amusing because some libraries like Alexandria already have none.

I guess that the author might be human, given that LLMs don't (yet) commonly show urges to dive into cryptocurrency, but the quality-to-volume ratio of this code is pretty much zero. I could generate them myself, if I ever got the urge, but I don't want to touch that code with a ten-foot pole.

[zyd-n]

Please don't add vibe coded garbage that could possibly sneak in malware. Vibe coded slop to this degree won't even be reasonably reviewed by anyone. There is zero reason to include any of it in quicklisp.

[wsgac]

I think the -pure suffix stands for "pure bullshit".

[dtenny]

A lot of this stuff, e.g. the 'alexandria-pure' thing, look like license and copyright washing. I cannot see any possible value from publishing this library. (Alexandria is public domain, the alexandra-pure adds a different license and claims copyright.)

[phoe]

The threading system has amusement value too.

(defun thread-alive-p (thread)
  "Return T if THREAD is still running."
  (sb-thread:thread-alive-p thread))

(defun current-thread ()
  "Return the current thread."
  sb-thread:*current-thread*)

(defun thread-name (thread)
  "Return the name of THREAD."
  (sb-thread:thread-name thread))

(defun all-threads ()
  "Return a list of all threads."
  (sb-thread:list-all-threads))

(defun destroy-thread (thread)
  "Terminate THREAD. Use with caution."
  (sb-thread:terminate-thread thread))

How can it use sb-thread? In the lock-memory example above, it refuses to use SBCL-specific stuff due to no external dependencies. Shouldn't we raise a bug for this?

[phoe]

A lot of this stuff, e.g. the 'alexandria-pure' thing, look like license and copyright washing. I cannot see any possible value from publishing this library.

@dtenny It's even more pathetic because Alexandria is already public domain. And yet somebody decided that it's too high-quality and needs to be slopified and remade with ZERO dependencies.

[phoe]

And everything is so standalone and zero-dependencies that https://github.com/parkianco/cl-merkle-trees/blob/01240bf1bca575cbfc47f31f3e545248706bb869/src/sha256.lisp does not even use sha256 from https://github.com/parkianco/cl-crypto-hash/blob/187740b7899ddeb512e9a778878d787dfc759161/src/sha256.lisp.

And so standalone that cl-siphash from https://github.com/parkianco/cl-siphash/blob/576bd2bdfff997794172b650449bbead791c916b/src/siphash.lisp#L109-L111 doesn't use https://github.com/parkianco/cl-utf8-pure or https://github.com/parkianco/cl-compat/blob/495049e6fec44f7fb6d202d11ae4a75bb0303285/src/utf8.lisp. More, it doesn't use utf8 so hard that the siphash function doesn't even convert properly into utf8. (@claude you skipped tests for that repository, please test for non-ASCII chars there. Thanks.)

Can we direct the author to publish on https://www.sloplisp.org/ instead and close this?

[trumae]

This type of action is very suspicious. Please do not accept it.

[trumae]

To me, this could be developer naiveté or a poorly executed supply chain attack.

[dkochmanski]

wow

[hajovonta]

This looks like a very low quality vibe-coded library set. It mostly reuses other libraries or built-ins without adding real value, judged by a random sample I have manually checked.