Superpack
A lightweight wrapper around Facebook's Superpack runtime used to extract files from Superpack archives (".spk", ".spo", and related formats).
Overview
Many Meta applications such as Instagram Lite, Facebook Lite, Messenger Lite, and other Android applications may package native libraries and assets using Superpack archive formats.
This project provides a simple command-line interface and Python API that automate the extraction process by invoking the bundled Java runtime and Superpack native library.
Features
- Extract ".spk" archives
- Extract ".spk.xz" archives
- Python API support
- Command-line interface
- Automatic Java detection
- ARM64 support
- Termux-friendly
- Works with archives containing one or multiple files
Installation
Install the package:
pip install .
or
pip install superpack
Usage
Command Line
Extract an archive:
superpack libs.spk
Specify output directory:
superpack -i libs.spk -o output
Show help:
superpack --help
Python API
import superpack
superpack.extract("libs.spk")
Custom output directory:
import superpack
superpack.extract( "libs.spk", output="output" )
Supported Environments
- Android (Termux)
- Linux ARM64 (aarch64)
Notes
This project is intended for research, reverse engineering, compatibility testing, and archive inspection.
The package itself does not modify application behavior and only extracts files from supported Superpack archives.
Disclaimer
Instagram, Facebook, Messenger, Meta, and related trademarks belong to their respective owners. This project is an independent utility and is not affiliated with, endorsed by, or sponsored by Meta.
Metadata
Release files for superpack 1.0.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| superpack-1.0.0.tar.gz | 1.2 MB | Without provenance | Details for superpack-1.0.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| superpack-1.0.0-py3-none-any.whl | Python 3 | none | any | Details for superpack-1.0.0-py3-none-any.whl |
Total release size: 2.4 MB
Release files / superpack-1.0.0.tar.gz
| Download URL | superpack-1.0.0.tar.gz |
|---|---|
| Size | 1.2 MB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
f3ddc9b58eb8002bcf8c566aaf5acf928a2edcbf46e3988551e85f406fb0bc90
|
|
BLAKE2b-256 checksum How to use checksums |
e1d86b77b973538d7e9f536da0184eb8f29b551ff2649aaa2005ac10887dfcc1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.7
|
Release files / superpack-1.0.0-py3-none-any.whl
| Download URL | superpack-1.0.0-py3-none-any.whl |
|---|---|
| Size | 1.2 MB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
e6aa36a08dd5d46835ec7dd27459368b32dbda1328290a52339046dd655802ed
|
|
BLAKE2b-256 checksum How to use checksums |
57a2940f6d312bb1fab9efb0187efbc8011e48057957d1bfcfae2e6981a8bb02
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.7
|
Security for superpack 1.0.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.