Automic VaultAutomic Vault

brew

bloaty mit Homebrew, apk, dnf, MacPorts, Nix, pacman installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bloaty in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install bloaty

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install bloaty

MacPorts ports tree · devel/bloaty/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add bloaty

Alpine Linux edge package indexes · bloaty · Quelle: dl-cdn.alpinelinux.org

Fedora dnfverifiziert · 92%
sudo dnf install bloaty

Fedora Rawhide package metadata · bloaty · Quelle: dl.fedoraproject.org

Nixverifiziert · 92%
nix profile install nixpkgs#bloaty

nixpkgs package indexes · pkgs/by-name/bl/bloaty/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S bloaty

Arch Linux sync databases · bloaty · Quelle: geo.mirror.pkgbuild.com

Überblick

Paketzusammenfassung

Size profiler for binaries

Befehle und Aliase

  • bloaty

Verlauf

Projektgeschichte und Nutzung

Bloaty, formally styled in its help text as Bloaty McBloatface, is Google's open source size profiler for binaries. It became a familiar package-manager utility for engineers who care about what actually makes an executable, library, firmware image, or WebAssembly artifact large.

Projektgeschichte

The official repository was created in 2016 and describes Bloaty as a size profiler for binaries. Its README frames the core question directly: finding what makes a binary big by showing size profiles across file size and virtual-memory size.

Bloaty's implementation is unusually deep for a size-reporting CLI. The README and internals documentation describe custom ELF, DWARF, and Mach-O parsing, experimental PE/COFF and WebAssembly support, disassembly-assisted attribution, hierarchical profiles, size diffs, demangling, separate debug files, and custom data sources.

The project reached Bloaty McBloatface v1.0 in August 2018 and v1.1 in May 2020. Its README also notes that it is not an official Google product, a common marker for Google-hosted open source tools that are useful outside their original internal context.

Adoptionsgeschichte

Bloaty's adoption followed the path of a specialist but widely useful developer tool: first-party docs and releases on GitHub, then packaging across major developer distributions. The input metadata records packages in Alpine apk, Homebrew, Fedora dnf, MacPorts, Nix, and Arch/pacman.

Its cross-platform binary-format support helped adoption outside one operating-system niche. Engineers working on native applications, toolchains, mobile code, embedded binaries, and Wasm can all use the same CLI vocabulary to ask where bytes went.

Wie es verwendet wird

The basic workflow is `bloaty FILE`, optionally with `-d` data sources such as sections, symbols, segments, or compile units. Bloaty reports both file size and VM size because debug data, zero-initialized data, mapped segments, and metadata can affect disk and runtime footprints differently.

A second major workflow is size diffing: users pass a current binary and a base binary separated by `--` to see exactly which sections, symbols, compile units, or other sources grew or shrank. That makes Bloaty especially attractive for release engineering and CI checks where size regressions need blameable output.

Warum Paket-Nerds sich dafür interessieren

Bloaty is package-nerd catnip because it explains package bloat with evidence instead of vibes. It bridges low-level object-file knowledge and everyday package maintenance by making debug sections, symbol tables, compile units, `.text`, `.rodata`, Mach-O load commands, and ELF program headers visible in a table humans can act on.

The tool is also a useful counterweight to vague binary-size debates. Package maintainers can compare stripped and unstripped builds, bundled dependencies, LTO changes, debug-info packaging, static-linking choices, and architecture-specific output using one reproducible CLI.

Compared with traditional tools such as `size`, `nm`, `objdump`, `readelf`, or linker map files, Bloaty packages several views into one profiler and preserves totals so the reported rows account for the whole file. That makes it unusually practical for maintainers who need to decide whether a size increase belongs in code, debug metadata, linked libraries, compiler output, or packaging policy.

Zeitleiste

  • 2016: Official Google-hosted Bloaty repository created.
  • 2018: Bloaty McBloatface v1.0 released.
  • 2020: Bloaty McBloatface v1.1 released.
  • Package era: Bloaty appears across apk, Homebrew, dnf, MacPorts, Nix, and pacman according to package metadata.

Related projects

  • `size`, `nm`, `objdump`, `readelf`, linker map files, and platform object-file tools are the traditional neighbors Bloaty complements.
  • ELF, DWARF, Mach-O, PE/COFF, and WebAssembly are the binary/debug formats named by Bloaty's official docs.
  • Bloaty bundles or can use dependencies including protobuf, RE2, Capstone, and pkg-config according to its README.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Installiert mit 4 Laufzeitabhängigkeiten.
  • Build-Metadaten listen 2 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bloatycliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-10
Manager-Version1.1
Manager aktualisiert2026-06-20
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://github.com/google/bloaty

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:bloaty
Version1.1
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/bloaty
Homepagehttps://github.com/google/bloaty
Repositoryhttps://github.com/google/bloaty
Upstream-Dokumentationhttps://github.com/google/bloaty/blob/main/doc/how-bloaty-works.md
LizenzApache-2.0
Quellarchivhttps://github.com/google/bloaty/releases/download/v1.1/bloaty-1.1.tar.bz2
Zuletzt aktualisiert2026-06-20T05:07:42Z
Pulseupdated
Abhängigkeitenabseil, capstone, protobuf, re2
Build-Abhängigkeitencmake, pkgconf
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebloaty
Version Scheme0
Revision50
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

bloaty

nix profile install nixpkgs#bloaty
  • normalized package name match
  • Abgeglichen nach: Bloaty
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bl/bloaty/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

bloaty 1.1-r31

Bloaty McBloatface: a size profiler for binaries

https://github.com/google/bloaty

sudo apk add bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bloaty
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bloaty
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bloaty from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

bloaty 1.1-51.fc45

A size profiler for binaries

https://github.com/google/bloaty

sudo dnf install bloaty
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-4-Clause-UC AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bloaty
  • 12 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Bloaty
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bloaty from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

bloaty 1.1-24

Size profiler for binaries

https://github.com/google/bloaty

sudo pacman -S bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • 4 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Bloaty
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: bloaty from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

bloaty

sudo port install bloaty
  • normalized package name match
  • Abgeglichen nach: Bloaty
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/bloaty/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment