Automic VaultAutomic Vault

brew

flow mit Homebrew, MacPorts, Nix, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für flow in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install flow

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install flow

MacPorts ports tree · devel/flow/Portfile · Quelle: api.github.com

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#flow

nixpkgs package indexes · pkgs/by-name/fl/flow/package.nix · Quelle: api.github.com

Windows

Scoopverifiziert · 92%
scoop install main/flow

Scoop official bucket manifest trees · bucket/flow.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%
winget install --id MadrasCheck.flow -e

Windows Package Manager source index · MadrasCheck.flow · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Static type checker for JavaScript

Verlauf

Projektgeschichte und Nutzung

Flow is Meta's static type checker and typed JavaScript dialect, distributed as the flow CLI and related npm tooling for checking JavaScript programs before runtime.

Projektgeschichte

Facebook announced Flow in November 2014 as a new static type checker for JavaScript designed to find errors by analyzing programs without running them. The official repository describes Flow as a static typechecker for JavaScript and points users to flow.org for documentation.

Flow developed around a per-project configuration file, .flowconfig, and an npm-oriented setup through flow-bin. Its documentation also covers Babel and flow-remove-types for stripping Flow type annotations before publishing or running JavaScript.

Adoptionsgeschichte

Flow became closely associated with Facebook and React-era JavaScript projects, where static analysis was adopted to make large JavaScript codebases easier to maintain. The official docs include React-specific material and a dedicated guide for TypeScript users, reflecting Flow's long-running position in the JavaScript type-checking ecosystem.

In 2023, the Flow team published an official direction statement explaining that the project was focusing on Meta's internal use cases and would reduce broad open-source engagement, a notable shift in the project's adoption story.

Wie es verwendet wird

Typical usage is project-local: install flow-bin, add a flow script, run flow init to create .flowconfig, and run flow to type-check source files. Flow projects use type annotations in JavaScript source and a compiler such as Babel or flow-remove-types to remove those annotations for runtime JavaScript.

Flow also publishes parser tooling, including flow-parser, for packages that need to parse Flow-typed JavaScript directly.

Warum Paket-Nerds sich dafür interessieren

Flow matters to package maintainers because it is both a CLI and a language-extension ecosystem: packages may ship Flow annotations, require stripping transforms, pin flow-bin versions, or expose libdefs and parser behavior that differ across releases.

Its history is also a useful contrast point for TypeScript in package metadata, because Flow-heavy projects often leave signals such as .flowconfig, flow-bin dev dependencies, and type-stripping build scripts.

Zeitleiste

  • 2014: Facebook announces Flow as a static type checker for JavaScript.
  • 2010s: Flow is used with JavaScript package workflows through flow-bin, Babel, and flow-remove-types.
  • 2023: The Flow team states a narrowed open-source direction focused on Meta's internal usage.
  • 2026: Official docs show Flow continuing with releases, .flowconfig reference docs, React docs, and TypeScript migration guidance.

Related projects

  • Official docs and README connect Flow to flow-bin, flow-parser, flow-remove-types, Babel, React, and TypeScript migration guidance.

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für flow wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
.flowconfigsrc/.flowconfig

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
flowcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26
Manager-Version0.324.0
Manager aktualisiert2026-07-24
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.324.0

https://github.com/facebook/flow

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:flow
Version0.324.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/flow
Homepagehttps://flow.org/
Repositoryhttps://github.com/facebook/flow
Upstream-Dokumentationhttps://flow.org/en/docs
LizenzMIT
Quellarchivhttps://github.com/facebook/flow/archive/refs/tags/v0.324.0.tar.gz
Zuletzt aktualisiert2026-07-24T21:16:34Z
Pulseupdated
Build-Abhängigkeitenrust
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameflow
Version Scheme0
Revision0
Head VersionHEAD
Conflicts With
  • flow-cli
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

flow

nix profile install nixpkgs#flow
  • normalized package name match
  • Abgeglichen nach: Flow
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/fl/flow/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

flow

sudo port install flow
  • normalized package name match
  • Abgeglichen nach: Flow
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/flow/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/flow

scoop install main/flow
  • normalized package name match
  • Abgeglichen nach: Flow
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/flow.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

MadrasCheck.flow

winget install --id MadrasCheck.flow -e
  • normalized package name match
  • Abgeglichen nach: Flow
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: MadrasCheck.flow from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment