Automic VaultAutomic Vault

brew

zero-install を Homebrew, winget, chocolatey, apt, dnf でインストール

zero-install のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

インストール

追加のインストールコマンド

macOS

Homebrew確認済み · 100%
brew install zero-install

local Homebrew formula metadata

Linux

Debian apt確認済み · 92%
sudo apt install 0install

Debian stable package indexes · 0install · ソース: deb.debian.org

Fedora dnf確認済み · 92%
sudo dnf install ocaml-0install-solver

Fedora Rawhide package metadata · ocaml-0install-solver · ソース: dl.fedoraproject.org

Windows

Windows Package Manager確認済み · 92%
winget install --id ZeroInstall.ZeroInstall -e

Windows Package Manager source index · ZeroInstall.ZeroInstall · ソース: cdn.winget.microsoft.com

Chocolatey確認済み · 92%
choco install 0install

Chocolatey community package catalog · 0install · ソース: community.chocolatey.org

概要

パッケージ概要

Decentralised cross-platform software installation system

コマンドとエイリアス

  • 0alias
  • 0desktop
  • 0install
  • 0launch
  • 0store
  • 0store-secure-add

履歴

プロジェクトの歴史と使われ方

Zero Install is a decentralized, cross-platform software installation system that lets upstream developers publish programs from their own websites while users keep dependency solving, updates, signatures, rollbacks, and native package-manager integration.

プロジェクトの歴史

Thomas Leonard traces Zero Install's goal back to 2003: secure, cross-platform, decentralized software installation. The earliest implementation was written in C as a Linux kernel module plus user-space helper, but that made Zero Install itself hard to distribute. In 2005 it was redesigned and reimplemented in Python to make bootstrapping easier.

The system's model deliberately complements rather than replaces the operating system package manager. The official docs say 0install packages do not interfere with distribution packages, and that developers publish XML metadata pointing at ordinary tarballs or zip files rather than inventing a new archive format.

The 1.0 release was made on May 23, 2011, and the 2.0 release followed on March 5, 2013. The 2.0 announcement emphasized backwards compatibility with 1.0 feeds while adding more expressive dependencies, native package integration for systems including Arch, Cygwin, Darwin, Fink, and MacPorts, an apps system for rollback, better diagnostics, shell completion, and improved headless support.

In 2013 Leonard migrated the core from Python to OCaml, finishing a 29,215-line port intended to preserve behavior while gaining static typing and faster startup. His 2014 retrospective reports similar code size, around 10x faster operations in simple benchmarks, and improved type-checking reliability.

採用の歴史

Zero Install has always been adoption-challenged in the interesting way decentralized package systems are: it reduces the need for central distro blessing, but depends on upstreams publishing feeds and users trusting the model. Its docs explicitly describe the chicken-and-egg problem where distributions may not package software until popular, while software cannot become popular until it is easy to install.

The supplied package data shows Zero Install available from Homebrew, Chocolatey, Debian, Ubuntu, Fedora-related OCaml packaging, and winget. That breadth reflects a mature cross-platform tool, even if it never displaced mainstream OS package managers.

The project also spread into related implementations and tools, including Zero Install for Windows, .NET components, feed/publishing utilities, and docs for integrating with native distribution package managers.

使われ方

Users typically invoke the `0install` family of commands to select and run applications from feed files, create aliases, manage cached implementations, or integrate desktop/menu entries. The model caches each version of a package separately rather than unpacking into system directories.

For developers, the work is feed publication: write XML metadata describing available implementations, dependencies, signatures, and platform constraints, then host it next to upstream software. 0install can use source or binary archives and can satisfy some dependencies from native package managers when appropriate.

Its practical appeal is strongest for cross-platform tools, research software, and upstream-controlled distribution where the author wants updates and dependency metadata without waiting for every distro repository.

パッケージ好きにとっての重要性

Zero Install is historically important because it explored a serious alternative to both central distro repositories and ad hoc upstream installers. It tried to preserve package-manager virtues such as dependency solving, shared libraries, signatures, updates, and rollbacks while decentralizing publication.

For package nerds, it is also a case study in bootstrapping and trust. The C kernel-helper origin, Python redesign, OCaml rewrite, XML feed model, digest-based caches, and native package-manager integration all show the tradeoffs of building a package ecosystem that spans distributions without owning them.

Even where Zero Install did not become the default installation path, many of its concerns are now familiar: per-user installs without root, content-addressed caches, reproducible metadata, side-by-side versions, and upstream-controlled distribution.

タイムライン

  • 2003: Zero Install's goal of secure, cross-platform, decentralized software installation begins.
  • 2005: Project is redesigned and reimplemented in Python to simplify distribution.
  • 2011-05-23: Zero Install 1.0 is released.
  • 2013-03-05: Zero Install 2.0 is released with backwards-compatible feeds, richer dependency metadata, native package integration, apps/rollback, diagnostics, completion, and headless improvements.
  • 2013: Core implementation is migrated from Python toward OCaml.
  • 2014-06-06: Thomas Leonard publishes a retrospective on the Python-to-OCaml migration.

Related projects

  • ROX Desktop is historically associated with Zero Install as a desktop environment that used decentralized application installation.
  • 0install-win and 0install-dotnet provide Windows/.NET-side Zero Install functionality.
  • 0release, 0repo, 0publish, and 0compile are related tools in the Zero Install packaging and release workflow.

セキュリティ状態

リスクレベル: グリーン

narrow executable package without higher-risk signals.

リスク分類器

リスク グリーン · 信頼度 低 · appliance

理由

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

インストール挙動

  • formula メタデータに Homebrew post-install フックは記録されていません。
  • Homebrew bottle メタデータは 13 個のプラットフォームターゲットで利用できます。
  • 1 件の実行時依存関係とともにインストールされます。
  • ビルドメタデータには 3 件のビルド依存関係があります。

推奨レビュー

エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Linux
~/.config/0install.net/injector/etc/xdg/0install.net/injector
Windows
%APPDATA%\0install.net\injector%PROGRAMDATA%\0install.net\injector

実行可能ファイル

インストールされる実行可能ファイル

コマンド種類公開範囲メモ
0aliascliグローバル実行可能ファイル
0desktopcliグローバル実行可能ファイル
0installcliグローバル実行可能ファイル
0launchcliグローバル実行可能ファイル
0storecliグローバル実行可能ファイル
0store-secure-addcliグローバル実行可能ファイル

鮮度

バージョンと鮮度

これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。

ページ生成日2026-07-08
マネージャ版2.18
マネージャ更新日
ローカルデータOK
上流not checked
検出された最新未検出

https://github.com/0install/0install

インストールメタデータ

パッケージメタデータ

パッケージキーbrew:zero-install
バージョン2.18
パッケージマネージャHomebrew
パッケージマネージャページhttps://formulae.brew.sh/formula/zero-install
ホームページhttps://0install.net/
リポジトリhttps://github.com/0install/0install
上流ドキュメントhttps://docs.0install.net/
ライセンスLGPL-2.1-or-later
ソースアーカイブhttps://github.com/0install/0install/releases/download/v2.18/0install-2.18.tbz
依存関係gnupg
ビルド依存関係ocaml, opam, pkgconf
macOS 提供ライブラリcurl
Bottle利用可能 (対象 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-install未定義
サービス宣言なし

レジストリ情報

ソースデータベース詳細

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namezero-install
Aliases
  • 0install
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

ソースデータベース一致

他のパッケージマネージャ記録

一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。

winget95%

ZeroInstall.ZeroInstall

winget install --id ZeroInstall.ZeroInstall -e
  • normalized package name match
  • 一致条件: Zero Install
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: ZeroInstall.ZeroInstall from https://cdn.winget.microsoft.com/cache/source.msix
Debian apt92%

0install 2.18-2.1

cross-distribution packaging system

http://0install.net/

sudo apt install 0install
  • Section: admin
  • Architecture: amd64
  • Source Package: zeroinstall-injector
  • 7 依存関係
  • installed executable or alias match
  • 一致条件: 0install
Debian stable package indexes · deb.debian.org · Debian stable package indexes: 0install from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt92%

0install 2.18-2ubuntu2

cross-distribution packaging system

http://0install.net/

sudo apt install 0install
  • Section: universe/admin
  • Architecture: amd64
  • Source Package: zeroinstall-injector
  • 7 依存関係
  • installed executable or alias match
  • 一致条件: 0install
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: 0install from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
dnf92%

ocaml-0install-solver 2.18-12.fc45

Package dependency solver

https://0install.net/

sudo dnf install ocaml-0install-solver
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: 0install
  • 2 依存関係
  • 2 提供
  • installed executable or alias match
  • 一致条件: 0install
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: ocaml-0install-solver from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf92%

ocaml-0install-solver-devel 2.18-12.fc45

Development files for 0install-solver

https://0install.net/

sudo dnf install ocaml-0install-solver-devel
  • License: LGPL-2.1-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: 0install
  • 3 依存関係
  • 3 提供
  • installed executable or alias match
  • 一致条件: 0install
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: ocaml-0install-solver-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
Chocolatey92%

0install

choco install 0install
  • installed executable or alias match
  • 一致条件: 0install
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: 0install from https://community.chocolatey.org/api/v2/Packages()?$filter=IsLatestVersion&$select=Id&$top=1000

ソース経路

リポジトリデータから生成

このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。

使用ソース

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment