Automic VaultAutomic Vault

brew

stuffbin mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für stuffbin in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install stuffbin

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#stuffbin

nixpkgs package indexes · pkgs/by-name/st/stuffbin/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Compress and embed static files and assets into Go binaries

Befehle und Aliase

  • stuffbin

Verlauf

Projektgeschichte und Nutzung

stuffbin is a small Go utility and package for compressing static assets and appending them to Go binaries, then exposing them through a virtual filesystem at runtime.

Projektgeschichte

The official README describes stuffbin as both a command-line utility and Go package for embedding static files into binaries. It says the project was inspired by zgok, with a simpler design and different abstractions.

The README was updated in June 2026 to say the project appears feature complete, with no changes required in roughly three years, while still being used in critical production systems.

Adoptionsgeschichte

The input package facts list stuffbin in Homebrew and Nix, which is consistent with a niche developer tool whose audience is Go application packagers rather than general end users.

Go 1.16 introduced native //go:embed support, and the README positions stuffbin against that built-in feature by emphasizing ZIP compression, dynamic embedding, path aliases, and embedding files outside the package directory.

Wie es verwendet wird

A typical stuffbin workflow builds a Go binary, runs stuffbin to append compressed assets, and then has the application read those assets back from itself through stuffbin's filesystem abstraction.

It is most relevant for distributing single-binary Go services with web assets, templates, or other static files while retaining a local-filesystem fallback during development.

Warum Paket-Nerds sich dafür interessieren

stuffbin matters to package nerds because it sits at the boundary between application packaging and language tooling: it changes what a Go binary can carry without requiring an external asset directory.

Its continued niche after //go:embed is the interesting bit: package maintainers care about compression, dynamic post-build stuffing, and layouts that Go's native embedding deliberately restricts.

Zeitleiste

  • 2021: Go 1.16 introduced //go:embed, later documented by stuffbin as the native feature it compares against.
  • 2026: The official README described stuffbin as feature complete and still used in critical production systems.

Related projects

  • Go's //go:embed is the native alternative discussed by the README.
  • zgok is named by the README as an inspiration for stuffbin.

Sicherheitslage

Risikostufe: blue

broad file, network, media, or database tool signal.

Risikoklassifikator

blue Risiko · mittel Konfidenz · tool

Warum

  • broad file, network, media, or database tool signal

Signale

  • text:compress

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 10 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
stuffbincliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-08
Manager-Version1.3.0
Manager aktualisiert
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv1.3.0

https://github.com/knadh/stuffbin

  • InfoNo package-manager update timestamp was available.niedrig Konfidenz

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:stuffbin
Version1.3.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/stuffbin
Homepagehttps://github.com/knadh/stuffbin
Repositoryhttps://github.com/knadh/stuffbin
Upstream-Dokumentationhttps://github.com/knadh/stuffbin#readme
LizenzMIT
Quellarchivhttps://github.com/knadh/stuffbin/archive/refs/tags/v1.3.0.tar.gz
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namestuffbin
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

stuffbin

nix profile install nixpkgs#stuffbin
  • normalized package name match
  • Abgeglichen nach: Stuffbin
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/st/stuffbin/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment