Instead of having a null pointer, use a dummy array which just
says the array is empty. This helps in multiple places of the code
which would otherwise need explicitly need to check first if the
array exists. This has been cause of multiple seg.faults in the
past as the array check is easily omitted.

This also removes (or fixes) all existing checks accordingly.

also makes it possibly to upgrade package without adding it to
top-level deps. fixes #69.

this way we never change cwd, and relative filenames are always
parsed consistently. this also helps filename construction in many
places. this patch also changes '--root' to override location of
all configuration to be in the new root. previously it depended
on the file which one was used.

apparently the double colon rule dependencies affect only the
specific rule-set.

an utility to check package signature and integrity.

use pkgconfig of zlib instead of hard requiring it. and link in
the pkg-config libs with --as-needed as not all of the openssl
libs are really required.

instead of having static md5 implemenation, use the openssl
library for digest functions.

Administrative tool to download or delete files to/from the cache.

Currently just goes through all world dependencies and updates them
where possible (ref #51).