Automic VaultAutomic Vault

brew

cppcheck を Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget でインストール

cppcheck のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストールコマンドセキュリティノート

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install cppcheck

local Homebrew formula metadata

MacPorts確認済み · 94%
sudo port install cppcheck

MacPorts ports tree · devel/cppcheck/Portfile · ソース: api.github.com

Linux

Alpine Linux apk確認済み · 92%
sudo apk add cppcheck

Alpine Linux edge package indexes · cppcheck · ソース: dl-cdn.alpinelinux.org

Debian apt確認済み · 92%
sudo apt install cppcheck

Debian stable package indexes · cppcheck · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install cppcheck

Fedora Rawhide package metadata · cppcheck · ソース: dl.fedoraproject.org

Nix確認済み · 92%
nix profile install nixpkgs#cppcheck

nixpkgs package indexes · pkgs/by-name/cp/cppcheck/package.nix · ソース: api.github.com

Arch Linux pacman確認済み · 92%
sudo pacman -S cppcheck

Arch Linux sync databases · cppcheck · ソース: geo.mirror.pkgbuild.com

openSUSE zypper確認済み · 92%
sudo zypper install cppcheck

openSUSE Tumbleweed package metadata · cppcheck · ソース: download.opensuse.org

Windows

Chocolatey確認済み · 92%
choco install cppcheck

Chocolatey community package catalog · cppcheck · ソース: community.chocolatey.org

Scoop確認済み · 92%
scoop install main/cppcheck

Scoop official bucket manifest trees · bucket/cppcheck.json · ソース: api.github.com

Windows Package Manager確認済み · 92%
winget install --id Cppcheck.Cppcheck -e

Windows Package Manager source index · Cppcheck.Cppcheck · ソース: cdn.winget.microsoft.com

概要

パッケージ概要

Static analysis of C and C++ code

コマンドとエイリアス

  • cppcheck
  • cppcheck-htmlreport

履歴

プロジェクトの歴史と使われ方

Cppcheck is an open-source static analysis tool for C and C++ code. It focuses on bugs that compilers commonly miss, especially undefined behavior and dangerous constructs, while trying to keep false positives low.

プロジェクトの歴史

The upstream README notes that the original name was C++check and was later changed to Cppcheck. It also says that despite the name, Cppcheck is designed for both C and C++.

The GitHub repository was created in March 2009. The README states that the repository moved from danmar/cppcheck to cppcheck-opensource/cppcheck, and the official website now links current source downloads to the cppcheck-opensource GitHub releases.

Cppcheck has kept both command-line and graphical user interfaces. Upstream build documentation covers CMake, Visual Studio, Qt Creator, GNU make, MinGW, and cross-compiling, which explains why it appears in many OS package ecosystems.

採用の歴史

The supplied package facts list Cppcheck across Homebrew, MacPorts, Debian, Ubuntu, Fedora/dnf, Alpine/apk, Arch/pacman, Nix, openSUSE/zypper, Chocolatey, Scoop, winget, and more. Upstream's README also explicitly points users to Homebrew, MacPorts, Conda, Conan, and other distribution channels, while warning that third-party packages may lag releases.

The official website lists integrations with development tools such as Buildbot, CLion, Code::Blocks, CodeLite, Eclipse, and others. That integration footprint is part of why Cppcheck is common in CI and editor workflows.

使われ方

Cppcheck is used from the command line and GUI to analyze C/C++ projects for memory issues, out-of-bounds access, uninitialized variables, null dereferences, invalid shifts, integer overflows, and other undefined behavior. Upstream also documents addon, rules, and platform data files as part of packaged installs.

パッケージ好きにとっての重要性

Cppcheck is package-significant because static analyzers are often installed as developer tools rather than vendored into one project. Packagers need to track release cadence, optional PCRE/rules support, GUI builds, data-file install paths, and the upstream repository move while preserving a stable cppcheck command for CI.

タイムライン

  • 2009: Public GitHub repository created.
  • 2025: The upstream README documents the repository move to cppcheck-opensource/cppcheck.
  • 2026: Official releases include Cppcheck 2.21.0.

Related projects

  • Cppcheck Premium is the upstream commercial offering with additional checks and support.
  • The official website lists editor and CI integrations, including Buildbot, CLion, Code::Blocks, CodeLite, and Eclipse.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 6 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 2 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
cppcheckcliグローバル実行可能ファイル
cppcheck-htmlreportcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-25
マネージャ版2.21.0
マネージャ更新日2026-07-05
ローカルデータOK
上流最新
検出された最新2.21.0

https://github.com/cppcheck-opensource/cppcheck

  • OK鮮度警告は生成されていません。

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:cppcheck
バージョン2.21.0
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/cppcheck
ホームページhttps://sourceforge.net/projects/cppcheck/
リポジトリhttps://github.com/cppcheck-opensource/cppcheck
上流ドキュメントhttps://cppcheck.sourceforge.io/
ライセンスGPL-3.0-or-later
ソースアーカイブhttps://github.com/cppcheck-opensource/cppcheck/archive/refs/tags/2.21.0.tar.gz
最終更新2026-07-05T00:14:30+09:00
Pulseupdated
依存関係tinyxml2
ビルド依存関係cmake, python@3.14
Bottle利用可能 (対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecppcheck
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

Debian apt95%

cppcheck 2.17.1-2

tool for static C/C++ code analysis (CLI)

https://sourceforge.net/p/cppcheck/wiki/Home/

sudo apt install cppcheck
  • Section: devel
  • Architecture: amd64
  • 6 依存関係
  • 3 任意依存関係
  • normalized package name match
  • 一致条件: Cppcheck
Debian stable package indexes · deb.debian.org · Debian stable package indexes: cppcheck from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

cppcheck-gui 2.17.1-2

tool for static C/C++ code analysis (GUI)

https://sourceforge.net/p/cppcheck/wiki/Home/

sudo apt install cppcheck-gui
  • Section: devel
  • Architecture: amd64
  • Source Package: cppcheck
  • 12 依存関係
  • 3 任意依存関係
  • normalized package name match
  • 一致条件: Cppcheck
Debian stable package indexes · deb.debian.org · Debian stable package indexes: cppcheck-gui from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

cppcheck

nix profile install nixpkgs#cppcheck
  • normalized package name match
  • 一致条件: Cppcheck
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cp/cppcheck/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

cppcheck 2.13.0-2ubuntu3

tool for static C/C++ code analysis (CLI)

https://sourceforge.net/p/cppcheck/wiki/Home/

sudo apt install cppcheck
  • Section: universe/devel
  • Architecture: amd64
  • 6 依存関係
  • 3 任意依存関係
  • normalized package name match
  • 一致条件: Cppcheck
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: cppcheck from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

cppcheck-gui 2.13.0-2ubuntu3

tool for static C/C++ code analysis (GUI)

https://sourceforge.net/p/cppcheck/wiki/Home/

sudo apt install cppcheck-gui
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: cppcheck
  • 12 依存関係
  • 3 任意依存関係
  • normalized package name match
  • 一致条件: Cppcheck
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: cppcheck-gui from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

cppcheck 2.21.0-r0

Static analysis tool for C/C++ code

https://cppcheck.sourceforge.io/

sudo apk add cppcheck
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: cppcheck
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cppcheck from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

cppcheck-doc 2.21.0-r0

Static analysis tool for C/C++ code (documentation)

https://cppcheck.sourceforge.io/

sudo apk add cppcheck-doc
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: cppcheck
  • normalized package name match
  • 一致条件: Cppcheck
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cppcheck-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

cppcheck-gui 2.21.0-r0

Qt gui for cppcheck

https://cppcheck.sourceforge.io/

sudo apk add cppcheck-gui
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: cppcheck
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cppcheck-gui from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

cppcheck-htmlreport 2.21.0-r0

Utility to generate a html report of a XML file produced by cppcheck

https://cppcheck.sourceforge.io/

sudo apk add cppcheck-htmlreport
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • Source Package: cppcheck
  • 1 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: cppcheck-htmlreport from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

cppcheck 2.21.0-1.fc45

Tool for static C/C++ code analysis

http://cppcheck.sourceforge.io/

sudo dnf install cppcheck
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cppcheck
  • 8 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cppcheck from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cppcheck-gui 2.21.0-1.fc45

Graphical user interface for cppcheck

http://cppcheck.sourceforge.io/

sudo dnf install cppcheck-gui
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cppcheck
  • 14 依存関係
  • 2 提供
  • normalized package name match
  • 一致条件: Cppcheck
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cppcheck-gui from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

cppcheck-htmlreport 2.21.0-1.fc45

HTML reporting for cppcheck

http://cppcheck.sourceforge.io/

sudo dnf install cppcheck-htmlreport
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cppcheck
  • 3 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: cppcheck-htmlreport from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

cppcheck 2.21.0-1

A tool for static C/C++ code analysis

http://cppcheck.sourceforge.net/

sudo pacman -S cppcheck
  • License: GPL-3.0-or-later
  • Architecture: x86_64
  • 6 依存関係
  • 2 任意依存関係
  • normalized package name match
  • 一致条件: Cppcheck
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cppcheck from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

cppcheck 2.21.0-1.1

A tool for static C/C++ code analysis

https://github.com/cppcheck-opensource/cppcheck

sudo zypper install cppcheck
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cppcheck
  • 6 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cppcheck from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
zypper95%

cppcheck-gui 2.21.0-1.1

A tool for static C/C++ code analysis

https://github.com/cppcheck-opensource/cppcheck

sudo zypper install cppcheck-gui
  • License: GPL-3.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: cppcheck
  • 11 依存関係
  • 1 提供
  • normalized package name match
  • 一致条件: Cppcheck
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: cppcheck-gui from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst
MacPorts95%

cppcheck

sudo port install cppcheck
  • normalized package name match
  • 一致条件: Cppcheck
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/cppcheck/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

パッケージグラフ

リンクは、ローカルのパッケージ関係グラフ、補足データ、依存関係、エコシステム一致、パッケージハブ所属から来ています。

関連ツール

  • cmakeBuild dependency declared by Homebrew.
  • python@3.14Build dependency declared by Homebrew.

同じワークフロー

  • cflowShares av.db curated category or tags: c, cli, developer-tools, static-analysis.
  • coccinelleShares av.db curated category or tags: c, cli, developer-tools, static-analysis.
  • esbmcShares av.db curated category or tags: c, cli, developer-tools, static-analysis.
  • splintShares av.db curated category or tags: c, cli, developer-tools, static-analysis.
  • cbmcShares av.db curated category or tags: c, c-plus-plus, cli, developer-tools, static-analysis.
  • checkstyleShares av.db curated category or tags: cli, developer-tools, static-analysis.

エージェント安全ガイド

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment