Automic VaultAutomic Vault

brew

Install clazy with Homebrew, apk, apt, dnf, Nix, pacman, zypper

Qt oriented static code analyzer. Version 1.17.1 via Homebrew; verified from local package data.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install clazy

local Homebrew formula metadata

Linux

Alpine Linux apkverified · 92%
sudo apk add clazy

Alpine Linux edge package indexes · clazy · source: dl-cdn.alpinelinux.org

Debian aptverified · 92%
sudo apt install clazy

Debian stable package indexes · clazy · source: deb.debian.org

Fedora dnfverified · 92%
sudo dnf install clazy

Fedora Rawhide package metadata · clazy · source: dl.fedoraproject.org

Nixverified · 92%
nix profile install nixpkgs#clazy

nixpkgs package indexes · pkgs/by-name/cl/clazy/package.nix · source: api.github.com

Arch Linux pacmanverified · 92%
sudo pacman -S clazy

Arch Linux sync databases · clazy · source: geo.mirror.pkgbuild.com

openSUSE zypperverified · 92%
sudo zypper install clazy

openSUSE Tumbleweed package metadata · clazy · source: download.opensuse.org

overview

Package summary

Qt oriented static code analyzer

Commands and aliases

  • clazy
  • clazy-standalone

history

Project history and usage

Clazy is a Qt-oriented static analyzer built as a Clang compiler plugin and standalone tool. Its upstream README describes it as giving Clang Qt semantics and adding more than 50 Qt-related warnings, including checks for unnecessary allocations, API misuse, and automatic fix-its.

Project history

The upstream changelog records a 0.0.1 first release on 2015-06-10 and a 1.0 release on 2016-09-12. Subsequent releases expanded platform support, check coverage, fix-its, and standalone compilation-database use.

Clazy was originally associated with KDAB-oriented Qt development workflows and is now hosted under KDE's SDK namespace. The current KDE project description calls it a Qt-oriented static code analyzer based on the Clang framework.

Adoption history

The README documents Linux, Windows, MacPorts, and Homebrew build paths, and the batch package metadata lists Alpine, Homebrew, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE packages. That distribution spread reflects adoption by Qt/C++ developers who want analyzer checks packaged with their compiler toolchains.

Release history shows ongoing updates for modern LLVM and Qt versions, including LLVM 19-22 compatibility work, Qt 6 porting changes, and integration into clang-tidy in the 1.16 series.

How it is used

Clazy is used either as a compiler wrapper/plugin or via clazy-standalone against a JSON compilation database. The README shows CMake and qmake usage, check levels, environment-variable and compiler-argument selection of checks, fix-it support, and warning-noise controls.

Why package nerds care

Clazy is a classic packaging edge case: it sits at the intersection of Qt, Clang/LLVM ABI compatibility, compiler plugins, IDE integration, and distro compiler versions. Package maintainers care because a clazy build must match supported LLVM/Clang ranges while still being useful across Qt 5 and Qt 6 codebases.

Timeline

  • 2015: Version 0.0.1 first release.
  • 2016: Version 1.0 release.
  • 2017: Version 1.1 adds macOS and Windows support.
  • 2017: Version 1.2 adds clazy-standalone for JSON compilation databases.
  • 2021: Version 1.10 requires C++17.
  • 2025: Version 1.16 adds clang-tidy integration.
  • 2026: Version 1.17 continues Qt and LLVM compatibility work.

Related projects

  • Clang and LLVM provide the compiler framework and plugin surface.
  • Qt is the target application framework whose idioms and APIs Clazy checks.
  • clang-tidy is a related analyzer integration point introduced by Clazy 1.16.
  • KDE hosts the active upstream repository under its SDK namespace.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew post-install hook is recorded in formula metadata.
  • Homebrew bottle metadata is available for 6 platform targets.
  • Installs with 2 runtime dependencies.
  • Build metadata lists 1 build dependencies.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
clazycliglobal executable
clazy-standalonecliglobal executable

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-07-08
manager version1.17.1
manager updated
local dataok
upstreamnot checked
latest detectednot detected

https://www.kdab.com/

  • infoNo package-manager update timestamp was available.low confidence
  • infoRelease/tag comparison is only available for GitHub repositories.https://www.kdab.com/none confidence

install metadata

Package metadata

Package keybrew:clazy
Version1.17.1
Package managerHomebrew
Package manager pagehttps://formulae.brew.sh/formula/clazy
Homepagehttps://www.kdab.com/
Repositoryhttps://invent.kde.org/sdk/clazy
Upstream docshttps://invent.kde.org/sdk/clazy/-/blob/master/README.md
LicenseLGPL-2.0-or-later
Source archivehttps://invent.kde.org/sdk/clazy/-/archive/v1.17.1/clazy-v1.17.1.tar.gz
Dependenciescoreutils, llvm
Build dependenciescmake
Bottleavailable (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnot defined
Servicenone declared

registry facts

Source database details

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameclazy
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Debian apt95%

clazy 1.14-1

Clang plugin for additional warnings

https://www.kdab.com/clazy-video/

sudo apt install clazy
  • Section: devel
  • Architecture: amd64
  • 6 dependencies
  • normalized package name match
  • Matched by: Clazy
Debian stable package indexes · deb.debian.org · Debian stable package indexes: clazy from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Debian apt95%

clazy-tests 1.14-1

test files for Clazy

https://www.kdab.com/clazy-video/

sudo apt install clazy-tests
  • Section: devel
  • Architecture: amd64
  • Source Package: clazy
  • 2 dependencies
  • normalized package name match
  • Matched by: Clazy
Debian stable package indexes · deb.debian.org · Debian stable package indexes: clazy-tests from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix95%

clazy

nix profile install nixpkgs#clazy
  • normalized package name match
  • Matched by: Clazy
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/cl/clazy/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt95%

clazy 1.11-4ubuntu2

Clang plugin for additional warnings

https://www.kdab.com/clazy-video/

sudo apt install clazy
  • Section: universe/devel
  • Architecture: amd64
  • 6 dependencies
  • normalized package name match
  • Matched by: Clazy
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: clazy from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
Ubuntu apt95%

clazy-tests 1.11-4ubuntu2

test files for Clazy

https://www.kdab.com/clazy-video/

sudo apt install clazy-tests
  • Section: universe/devel
  • Architecture: amd64
  • Source Package: clazy
  • 2 dependencies
  • normalized package name match
  • Matched by: Clazy
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: clazy-tests from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk95%

clazy 1.17.1-r1

Qt oriented code checker based on clang framework

https://invent.kde.org/sdk/clazy

sudo apk add clazy
  • License: LGPL-2.0-only
  • Architecture: x86_64
  • Source Package: clazy
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Clazy
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: clazy from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk95%

clazy-doc 1.17.1-r1

Qt oriented code checker based on clang framework (documentation)

https://invent.kde.org/sdk/clazy

sudo apk add clazy-doc
  • License: LGPL-2.0-only
  • Architecture: x86_64
  • Source Package: clazy
  • normalized package name match
  • Matched by: Clazy
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: clazy-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

clazy 1.17-2.fc45

Qt oriented code checker based on clang framework

https://invent.kde.org/sdk/clazy

sudo dnf install clazy
  • License: LGPL-2.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: clazy
  • 9 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Clazy
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: clazy from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

clazy 1.17.1-1

Qt oriented code checker based on clang framework

https://www.kdab.com/

sudo pacman -S clazy
  • License: GPL-2.0-or-later
  • Architecture: x86_64
  • 6 dependencies
  • normalized package name match
  • Matched by: Clazy
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: clazy from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper95%

clazy 1.17.1-1.6

Qt oriented code checker based on the Clang framework

https://apps.kde.org/clazy/

sudo zypper install clazy
  • License: LGPL-2.0-or-later
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: clazy
  • 10 dependencies
  • 2 provides
  • normalized package name match
  • Matched by: Clazy
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: clazy from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

Related tools

  • coreutilsRuntime dependency declared by Homebrew.
  • llvmRuntime dependency declared by Homebrew.
  • cmakeBuild dependency declared by Homebrew.

Same workflow

  • clangqlShares av.db curated category or tags: clang, cli, cpp, developer-tools, static-analysis.
  • include-what-you-useShares av.db curated category or tags: clang, cli, cpp, developer-tools, static-analysis.
  • clang-include-graphShares av.db curated category or tags: clang, cli, cpp, developer-tools.
  • boost-bcpShares av.db curated category or tags: cli, cpp, developer-tools.
  • cabinShares av.db curated category or tags: cli, cpp, developer-tools.
  • cflowShares av.db curated category or tags: cli, developer-tools, static-analysis.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment