Automic VaultAutomic Vault

brew

Install bloaty with Homebrew, apk, dnf, MacPorts, Nix, pacman

Size profiler for binaries. Version 1.1 via Homebrew; verified 2026-06-20.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install bloaty

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install bloaty

MacPorts ports tree · devel/bloaty/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add bloaty

Alpine Linux edge package indexes · bloaty · source: dl-cdn.alpinelinux.org

Fedora dnfverified · 92%
sudo dnf install bloaty

Fedora Rawhide package metadata · bloaty · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#bloaty

nixpkgs package indexes · pkgs/by-name/bl/bloaty/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S bloaty

Arch Linux sync databases · bloaty · source: geo.mirror.pkgbuild.com

overview

Package summary

Size profiler for binaries

Commands and aliases

  • bloaty

history

Project history and usage

Bloaty, formally styled in its help text as Bloaty McBloatface, is Google's open source size profiler for binaries. It became a familiar package-manager utility for engineers who care about what actually makes an executable, library, firmware image, or WebAssembly artifact large.

Project history

The official repository was created in 2016 and describes Bloaty as a size profiler for binaries. Its README frames the core question directly: finding what makes a binary big by showing size profiles across file size and virtual-memory size.

Bloaty's implementation is unusually deep for a size-reporting CLI. The README and internals documentation describe custom ELF, DWARF, and Mach-O parsing, experimental PE/COFF and WebAssembly support, disassembly-assisted attribution, hierarchical profiles, size diffs, demangling, separate debug files, and custom data sources.

The project reached Bloaty McBloatface v1.0 in August 2018 and v1.1 in May 2020. Its README also notes that it is not an official Google product, a common marker for Google-hosted open source tools that are useful outside their original internal context.

Adoption history

Bloaty's adoption followed the path of a specialist but widely useful developer tool: first-party docs and releases on GitHub, then packaging across major developer distributions. The input metadata records packages in Alpine apk, Homebrew, Fedora dnf, MacPorts, Nix, and Arch/pacman.

Its cross-platform binary-format support helped adoption outside one operating-system niche. Engineers working on native applications, toolchains, mobile code, embedded binaries, and Wasm can all use the same CLI vocabulary to ask where bytes went.

How it is used

The basic workflow is `bloaty FILE`, optionally with `-d` data sources such as sections, symbols, segments, or compile units. Bloaty reports both file size and VM size because debug data, zero-initialized data, mapped segments, and metadata can affect disk and runtime footprints differently.

A second major workflow is size diffing: users pass a current binary and a base binary separated by `--` to see exactly which sections, symbols, compile units, or other sources grew or shrank. That makes Bloaty especially attractive for release engineering and CI checks where size regressions need blameable output.

Why package nerds care

Bloaty is package-nerd catnip because it explains package bloat with evidence instead of vibes. It bridges low-level object-file knowledge and everyday package maintenance by making debug sections, symbol tables, compile units, `.text`, `.rodata`, Mach-O load commands, and ELF program headers visible in a table humans can act on.

The tool is also a useful counterweight to vague binary-size debates. Package maintainers can compare stripped and unstripped builds, bundled dependencies, LTO changes, debug-info packaging, static-linking choices, and architecture-specific output using one reproducible CLI.

Compared with traditional tools such as `size`, `nm`, `objdump`, `readelf`, or linker map files, Bloaty packages several views into one profiler and preserves totals so the reported rows account for the whole file. That makes it unusually practical for maintainers who need to decide whether a size increase belongs in code, debug metadata, linked libraries, compiler output, or packaging policy.

Timeline

  • 2016: Official Google-hosted Bloaty repository created.
  • 2018: Bloaty McBloatface v1.0 released.
  • 2020: Bloaty McBloatface v1.1 released.
  • Package era: Bloaty appears across apk, Homebrew, dnf, MacPorts, Nix, and pacman according to package metadata.

Related projects

  • `size`, `nm`, `objdump`, `readelf`, linker map files, and platform object-file tools are the traditional neighbors Bloaty complements.
  • ELF, DWARF, Mach-O, PE/COFF, and WebAssembly are the binary/debug formats named by Bloaty's official docs.
  • Bloaty bundles or can use dependencies including protobuf, RE2, Capstone, and pkg-config according to its README.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 4 runtime dependencies.
  • Build metadata lists 2 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
bloatycliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.1
manager updated2026-06-20
local dataok
upstreamnot checked
latest detectednot detected

https://github.com/google/bloaty

install metadata

Package metadata

Package keybrew:bloaty
Version1.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/bloaty
Homepagehttps://github.com/google/bloaty
Repositoryhttps://github.com/google/bloaty
Upstream docshttps://github.com/google/bloaty/blob/main/doc/how-bloaty-works.md
LicenseApache-2.0
Source archivehttps://github.com/google/bloaty/releases/download/v1.1/bloaty-1.1.tar.bz2
Last updated2026-06-20T05:07:42Z
Pulseupdated
Dependenciesabseil, capstone, protobuf, re2
Build dependenciescmake, pkgconf
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebloaty
Version Scheme0
Revision50
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

bloaty

nix profile install nixpkgs#bloaty
  • normalized package name match
  • Matched by: Bloaty
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bl/bloaty/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

bloaty 1.1-r31

Bloaty McBloatface: a size profiler for binaries

https://github.com/google/bloaty

sudo apk add bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bloaty
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bloaty
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bloaty from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

bloaty 1.1-51.fc45

A size profiler for binaries

https://github.com/google/bloaty

sudo dnf install bloaty
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-4-Clause-UC AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bloaty
  • 12 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Bloaty
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bloaty from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

bloaty 1.1-24

Size profiler for binaries

https://github.com/google/bloaty

sudo pacman -S bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • 4 dependencies
  • normalized package name match
  • Matched by: Bloaty
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: bloaty from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

bloaty

sudo port install bloaty
  • normalized package name match
  • Matched by: Bloaty
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/bloaty/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment