Automic VaultAutomic Vault

brew

cargo-bloat mit Homebrew, apk, Nix, pacman installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für cargo-bloat in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install cargo-bloat

local Homebrew formula metadata

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add cargo-bloat

Alpine Linux edge package indexes · cargo-bloat · Quelle: dl-cdn.alpinelinux.org

Nixverifiziert · 92%
nix profile install nixpkgs#cargo-bloat

nixpkgs package indexes · pkgs/by-name/ca/cargo-bloat/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S cargo-bloat

Arch Linux sync databases · cargo-bloat · Quelle: geo.mirror.pkgbuild.com

Überblick

Paketzusammenfassung

Find out what takes most of the space in your executable

Befehle und Aliase

  • cargo-bloat

Verlauf

Projektgeschichte und Nutzung

cargo-bloat is a Cargo subcommand for explaining where compiled Rust binary size goes. It analyzes release artifacts and reports the largest functions or crates contributing to executable text size.

Projektgeschichte

Yevhenii Reizner's cargo-bloat repository was created in January 2018, and version 0.1.0 was published to crates.io a few days later. The README describes the package as a way to find what takes most of the space in an executable, with support for ELF, Mach-O, and PE binaries.

The project was explicitly inspired by Google's Bloaty binary size profiler while adopting a Rust/Cargo-specific interface. Over later releases it added and kept options such as per-crate views, filtering, splitting standard-library crates, full function names, wide output, and JSON output.

Adoptionsgeschichte

cargo-bloat spread because Rust developers regularly need size explanations for CLI tools, embedded-adjacent binaries, WebAssembly-adjacent investigations, and release optimization. Crates.io places it in the Cargo plugins category and reports more than 360,000 downloads.

Its package-manager footprint is broader than a one-off Cargo plugin: the input records Homebrew, Alpine, Nix, and Arch packaging. That matters because size-analysis tools are often installed globally on developer machines and CI images rather than vendored into projects.

Wie es verwendet wird

The common path is `cargo install cargo-bloat` and then `cargo bloat --release -n 10` to list the largest functions in the release build. `cargo bloat --release --crates` switches the view to crate-level contribution.

The README emphasizes that per-crate numbers are estimates, not exact accounting. It also notes that WebAssembly is not supported and points users toward twiggy for that use case.

Warum Paket-Nerds sich dafür interessieren

cargo-bloat is a classic package-nerd tool because it turns compiler output into a ranked table that directly informs dependency choices. It is one of the Rust ecosystem's small, sharp CLI packages that makes invisible package cost visible.

Its relationship to Bloaty and twiggy also shows how Rust packaging borrowed from general binary-analysis culture while building Cargo-native workflows for Rust developers.

Zeitleiste

  • 2018-01-07: GitHub repository RazrFalcon/cargo-bloat was created.
  • 2018-01-11: cargo-bloat 0.1.0 was published on crates.io.
  • 2018-2020: The 0.2 through 0.10 releases iterated quickly on Cargo-plugin binary-size reporting.
  • 2022-06-04: Version 0.11.1 was published.
  • 2024-05-10: Version 0.12.1 was published.

Related projects

  • google/bloaty is cited by the README as an inspiration.
  • rustwasm/twiggy is recommended by the README for WebAssembly size analysis.
  • Cargo's plugin mechanism provides the `cargo bloat` subcommand interface.

Quellen

  • GitHub repository API metadata: https://api.github.com/repos/RazrFalcon/cargo-bloat
  • Official README: https://github.com/RazrFalcon/cargo-bloat#readme
  • Package-manager adoption from source_facts.package-manager.
  • crates.io API metadata and versions: https://crates.io/api/v1/crates/cargo-bloat

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 10 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
cargo-bloatcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version0.12.1
Manager aktualisiert
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.12.1

https://github.com/RazrFalcon/cargo-bloat

  • InfoNo package-manager update timestamp was available.niedrig Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:cargo-bloat
Version0.12.1
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/cargo-bloat
Homepagehttps://github.com/RazrFalcon/cargo-bloat
Repositoryhttps://github.com/RazrFalcon/cargo-bloat
Upstream-Dokumentationhttps://github.com/RazrFalcon/cargo-bloat#readme
LizenzMIT
Quellarchivhttps://github.com/RazrFalcon/cargo-bloat/archive/refs/tags/v0.12.1.tar.gz
Build-Abhängigkeitenrust
Bottleverfügbar (auf arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecargo-bloat
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

cargo-bloat

nix profile install nixpkgs#cargo-bloat
  • normalized package name match
  • Abgeglichen nach: Cargo Bloat
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/cargo-bloat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

cargo-bloat 0.12.1-r0

Find out what takes most of the space in your Rust executable

https://github.com/RazrFalcon/cargo-bloat

sudo apk add cargo-bloat
  • License: MIT
  • Architecture: x86_64
  • Source Package: cargo-bloat
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Cargo Bloat
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cargo-bloat from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
pacman95%

cargo-bloat 0.12.1-2

Find out what takes most of the space in your executable

https://github.com/RazrFalcon/cargo-bloat

sudo pacman -S cargo-bloat
  • License: MIT
  • Architecture: x86_64
  • 3 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Cargo Bloat
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cargo-bloat from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment