Automic VaultAutomic Vault

brew

bender mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bender in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install bender

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#bender

nixpkgs package indexes · pkgs/by-name/be/bender/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Dependency management tool for hardware projects

Befehle und Aliase

  • bender

Verlauf

Projektgeschichte und Nutzung

Bender is PULP Platform's dependency manager for hardware design projects. It manages HDL package dependencies from Git repositories and local paths, resolves compatible versions, writes a `Bender.lock`, and emits ordered source sets for downstream EDA tools.

Projektgeschichte

The official GitHub repository was created in May 2018 and is maintained by the PULP Platform at ETH Zurich and the University of Bologna. The README positions Bender as a tool that fits existing hardware flows instead of imposing a registry, directory layout, or simulator.

By the 0.24.0 release in January 2022, Bender had an established public release stream; releases continued through the 0.32.0 release in June 2026. The project is written and distributed as a developer CLI with crates.io, Homebrew, and Nix packaging signals.

Adoptionsgeschichte

Bender's adoption sits in the open hardware and HDL ecosystem rather than general software packaging. It is used to pin Git-based IP dependencies, handle local overrides, and generate scripts for tools such as QuestaSim, VCS, Vivado, and Verilator.

The PULP Platform affiliation gives it a notable institutional context: it serves the kind of multi-repository hardware IP workflow common in research and silicon-development groups.

Wie es verwendet wird

A typical workflow is to create or edit `Bender.yml`, run `bender update` to resolve dependencies and write `Bender.lock`, optionally run `bender checkout`, and generate simulator or synthesis tool inputs with `bender script`.

`Bender.local` is used for local dependency overrides when developing hardware IP in place. This makes Bender closer to Cargo or Bundler in spirit than to a simulator wrapper, but specialized for HDL source ordering and EDA tool integration.

Warum Paket-Nerds sich dafür interessieren

Bender is package-nerd significant because hardware projects often have dependency problems that look like software package management but with HDL-specific source ordering, include directories, defines, and simulator targets. Bender packages those concerns into a reproducible CLI.

It is also an example of package management without a central registry: dependencies can come from Git tags, revisions, or local paths, and reproducibility is carried by the lockfile.

Zeitleiste

  • 2018: GitHub repository created.
  • 2022: v0.24.0 release published.
  • 2024: v0.28.0 release published.
  • 2025: v0.29.0 release published.
  • 2026: v0.32.0 release published.

Related projects

  • The PULP Platform maintains Bender and uses it in the open hardware ecosystem.
  • QuestaSim, VCS, Vivado, and Verilator are documented downstream tool targets.
  • Cargo/crates.io is part of the distribution story for the Rust-based CLI.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 2 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
./Bender.yml./Bender.local

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bendercliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version0.32.1
Manager aktualisiert2026-07-07
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.32.1

https://github.com/pulp-platform/bender

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:bender
Version0.32.1
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/bender
Homepagehttps://github.com/pulp-platform/bender
Repositoryhttps://github.com/pulp-platform/bender
Upstream-Dokumentationhttps://pulp-platform.github.io/bender
LizenzApache-2.0 OR MIT
Quellarchivhttps://github.com/pulp-platform/bender/archive/refs/tags/v0.32.1.tar.gz
Zuletzt aktualisiert2026-07-07T15:31:59Z
Pulseupdated
Build-Abhängigkeitencmake, rust
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebender
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

bender

nix profile install nixpkgs#bender
  • normalized package name match
  • Abgeglichen nach: Bender
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/be/bender/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Verwandte Tools

  • cmakeBuild dependency declared by Homebrew.
  • rustBuild dependency declared by Homebrew.

Gleicher Workflow

  • peruShares av.db curated category or tags: cli, dependency-management, developer-tools.
  • pipenvShares av.db curated category or tags: cli, dependency-management, developer-tools.
  • swift-outdatedShares av.db curated category or tags: cli, dependency-management, developer-tools.
  • carthageShares av.db curated category or tags: cli, dependency-management, developer-tools.
  • cocoapodsShares av.db curated category or tags: cli, dependency-management, developer-tools.
  • coursierShares av.db curated category or tags: cli, dependency-management, developer-tools.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment