Automic VaultAutomic Vault

brew

bit を Homebrew, MacPorts, Nix, scoop でインストール

bit のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install bit

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install bit

MacPorts ports tree · devel/bit/Portfile · ソース: api.github.com

Linux

Nix確認済み · 92%
nix profile install nixpkgs#bit

nixpkgs package indexes · pkgs/by-name/bi/bit/package.nix · ソース: api.github.com

Windows

Scoop確認済み · 92%
scoop install main/bit

Scoop official bucket manifest trees · bucket/bit.json · ソース: api.github.com

概要

パッケージ概要

Distributed Code Component Manager

履歴

プロジェクトの歴史と使われ方

Bit is Teambit's component-oriented development platform and CLI. It started as a way to manage and share code components across repositories, and its current documentation frames it as a build system for composing components, applications, and AI-assisted development workspaces.

プロジェクトの歴史

The official teambit/bit repository was created in 2017. Its README describes Bit as a system for organizing source code into reusable components, with support for common JavaScript and TypeScript environments such as Node.js, React, Angular, Vue, React Native, and Next.js.

Over time Bit expanded from a distributed component manager into a broader workspace, build, release, and cloud collaboration system. The current README emphasizes composable components, shell applications, CI, Bit Cloud scopes, and reusable templates for both developers and AI agents.

採用の歴史

Bit's adoption has been strongest in JavaScript and TypeScript component ecosystems, especially teams trying to share UI or backend modules across monorepos and polyrepos. Its package-manager presence in Homebrew, MacPorts, Nix, and Scoop reflects a cross-platform CLI distribution strategy rather than a Unix-only tool.

The project remains actively maintained: the GitHub repository shows continued activity in 2026 and release tags in the 1.13 series. The README also points users to Bit Cloud and a community space, which are central to the hosted-scope workflow.

使われ方

Typical usage starts with installing Bit, running `bit init --default-scope`, creating components or applications with `bit create`, previewing them with the Bit UI or `bit run`, versioning them with `bit tag`, and exporting them with `bit export`.

Bit is most useful when a team wants code units to have their own build, test, version, dependency, and release lifecycle while still living inside existing repositories or workspaces.

パッケージ好きにとっての重要性

For package nerds, Bit is interesting because it blurs the line between package manager, monorepo tool, component registry, and build orchestrator. It treats components as first-class packageable units instead of making the repository the only meaningful boundary.

It also explains the Homebrew naming collision with `bit-git`: the simple `bit` formula belongs to Teambit's component workflow, while the modern Git helper is packaged as `bit-git`.

タイムライン

  • 2017: The teambit/bit repository is created.
  • Late 2010s: Bit is presented as a distributed code component manager for sharing components across projects.
  • 2020s: Bit grows into a component workspace and build system tied to Bit Cloud scopes and JavaScript/TypeScript environments.
  • 2026: The project continues publishing 1.13.x releases and active repository updates.

Related projects

  • Bit Cloud is the hosted scope and collaboration platform documented by the project.
  • npm and standard JavaScript package managers consume exported Bit components as packages.
  • Nx, Turborepo, and Lerna occupy adjacent monorepo and workspace-tooling territory, though Bit's component model is distinct.
  • React, Angular, Vue, Node.js, React Native, and Next.js are official environment targets named in the README.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 10 個のプラットフォームターゲットで利用できます。
  • 2 件の実行時依存関係とともにインストールされます。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

macOS
~/Library/Caches/Bit/config/config.json
Unix
./workspace.jsonc

Credential files

Credential-bearing paths to review before unattended agent runs.

macOS
~/Library/Caches/Bit/config/config.json~/.ssh/id_rsa

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
bitcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-08
マネージャ版14.8.8
マネージャ更新日2026-06-22
ローカルデータOK
上流not checked
検出された最新未検出

https://bit.dev

  • 情報Release/tag comparison is only available for GitHub repositories.https://bit.dev信頼度 none

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:bit
バージョン14.8.8
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/bit
ホームページhttps://bit.dev
リポジトリhttps://github.com/teambit/bit
上流ドキュメントhttps://bit.dev/docs
ライセンスApache-2.0
ソースアーカイブhttps://registry.npmjs.org/bit-bin/-/bit-bin-14.8.8.tgz
最終更新2026-06-22T14:02:53-07:00
Pulseupdated
依存関係node, terminal-notifier
Bottle利用可能 (対象 arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebit
Version Scheme0
Revision1
Head VersionHEAD
Conflicts With
  • bit-git
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Nix95%

bit

nix profile install nixpkgs#bit
  • normalized package name match
  • 一致条件: Bit
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bi/bit/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

bit

sudo port install bit
  • normalized package name match
  • 一致条件: Bit
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/bit/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Scoop95%

main/bit

scoop install main/bit
  • normalized package name match
  • 一致条件: Bit
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/bit.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment