macOS
Homebrewverifiziert · 100%
brew install caracallocal Homebrew formula metadata
brew
caracal mit Homebrew installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für caracal in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Überblick
Paketzusammenfassung
Static analyzer for Starknet smart contracts
Projektlinks
Befehle und Aliase
- caracal
Verlauf
Projektgeschichte und Nutzung
Caracal is a Rust command-line static analyzer for Starknet smart contracts, working over Cairo's SIERRA representation to run vulnerability detectors, printers, taint analysis, and data-flow analysis.
Projektgeschichte
Caracal was created in the Crytic GitHub organization in January 2023. The Crytic organization describes itself as blockchain security by Trail of Bits, placing Caracal in the same family of security analysis tooling as other Crytic projects.
The README describes Caracal as a static analyzer over SIERRA for Starknet smart contracts. It supports standalone Cairo files, Cairo projects, and Scarb projects, with precompiled binaries published on GitHub releases.
Adoptionsgeschichte
Caracal's public adoption is narrower than general-purpose static analyzers because it targets the Starknet/Cairo ecosystem. Its first GitHub release, v0.1.0, appeared in July 2023, followed by 0.2.x releases for Cairo compiler 2.x support.
The Homebrew formula packages the caracal CLI, making it convenient for auditors and developers on macOS to run the same detector list documented in the upstream README.
Wie es verwendet wird
Users run caracal detectors to list available detectors, caracal printers to list printers, caracal detect to analyze standalone files or projects, and caracal print to export information such as CFGs and call graphs.
For Scarb projects, the README instructs users to enable SIERRA output in Scarb.toml before running Caracal. For standalone analysis with a bundled compiler, users may need to provide Cairo corelib with --corelib or CORELIB_PATH.
Warum Paket-Nerds sich dafür interessieren
Caracal is package-nerd interesting as a young blockchain-security analyzer where the package boundary includes a Rust CLI, Cairo compiler dependencies, SIERRA compatibility, and smart-contract audit workflows.
It also shows how quickly niche language ecosystems produce packageable analyzers once the compiler exposes a stable intermediate representation.
Zeitleiste
- 2023-01: crytic/caracal repository is created on GitHub.
- 2023-07: Caracal v0.1.0 is published.
- 2023-08: v0.2.0 is published for the Cairo compiler 2.x line.
- 2024-01: v0.2.3 is published, matching the version in Cargo.toml.
- 2026: Homebrew formula metadata still identifies Caracal as a Starknet smart-contract static analyzer.
Related projects
- Cairo and the cairo-lang compiler crates are direct dependencies named in Caracal's Cargo.toml.
- Starknet is the smart-contract platform Caracal targets.
- Scarb is the Cairo package/build tool flow documented by Caracal.
- Crytic and Trail of Bits provide the security-tooling context for the project.
Quellen
Sicherheitslage
Risikostufe: grün
narrow executable package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- narrow executable package without higher-risk signals
Signale
- metadata:no-higher-risk-signals
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 10 Plattformziele verfügbar.
- Build-Metadaten listen 1 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
caracal | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-07-25
Manager-Version0.2.3
Manager aktualisiert
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.2.3
https://github.com/crytic/caracal
- InfoNo package-manager update timestamp was available.niedrig Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:caracal |
|---|---|
| Version | 0.2.3 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/caracal |
| Homepage | https://github.com/crytic/caracal |
| Repository | https://github.com/crytic/caracal |
| Upstream-Dokumentation | https://github.com/crytic/caracal#readme |
| Lizenz | AGPL-3.0-only |
| Quellarchiv | https://github.com/crytic/caracal/archive/refs/tags/v0.2.3.tar.gz |
| Build-Abhängigkeiten | rust |
| Bottle | verfügbar (auf arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | caracal |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- package relationship graph
- package version freshness
- package-page enrichment