Automic VaultAutomic Vault

brew

使用 Homebrew, apk, dnf, MacPorts, Nix, pacman 安装 bloaty

查看 bloaty 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install bloaty

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install bloaty

MacPorts ports tree · devel/bloaty/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%
sudo apk add bloaty

Alpine Linux edge package indexes · bloaty · 来源: dl-cdn.alpinelinux.org

Fedora dnf已验证 · 92%
sudo dnf install bloaty

Fedora Rawhide package metadata · bloaty · 来源: dl.fedoraproject.org

Nix已验证 · 92%
nix profile install nixpkgs#bloaty

nixpkgs package indexes · pkgs/by-name/bl/bloaty/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S bloaty

Arch Linux sync databases · bloaty · 来源: geo.mirror.pkgbuild.com

概览

软件包摘要

Size profiler for binaries

命令和别名

  • bloaty

历史

项目历史与用法

Bloaty, formally styled in its help text as Bloaty McBloatface, is Google's open source size profiler for binaries. It became a familiar package-manager utility for engineers who care about what actually makes an executable, library, firmware image, or WebAssembly artifact large.

项目历史

The official repository was created in 2016 and describes Bloaty as a size profiler for binaries. Its README frames the core question directly: finding what makes a binary big by showing size profiles across file size and virtual-memory size.

Bloaty's implementation is unusually deep for a size-reporting CLI. The README and internals documentation describe custom ELF, DWARF, and Mach-O parsing, experimental PE/COFF and WebAssembly support, disassembly-assisted attribution, hierarchical profiles, size diffs, demangling, separate debug files, and custom data sources.

The project reached Bloaty McBloatface v1.0 in August 2018 and v1.1 in May 2020. Its README also notes that it is not an official Google product, a common marker for Google-hosted open source tools that are useful outside their original internal context.

采用历史

Bloaty's adoption followed the path of a specialist but widely useful developer tool: first-party docs and releases on GitHub, then packaging across major developer distributions. The input metadata records packages in Alpine apk, Homebrew, Fedora dnf, MacPorts, Nix, and Arch/pacman.

Its cross-platform binary-format support helped adoption outside one operating-system niche. Engineers working on native applications, toolchains, mobile code, embedded binaries, and Wasm can all use the same CLI vocabulary to ask where bytes went.

使用方式

The basic workflow is `bloaty FILE`, optionally with `-d` data sources such as sections, symbols, segments, or compile units. Bloaty reports both file size and VM size because debug data, zero-initialized data, mapped segments, and metadata can affect disk and runtime footprints differently.

A second major workflow is size diffing: users pass a current binary and a base binary separated by `--` to see exactly which sections, symbols, compile units, or other sources grew or shrank. That makes Bloaty especially attractive for release engineering and CI checks where size regressions need blameable output.

为什么软件包爱好者会关心

Bloaty is package-nerd catnip because it explains package bloat with evidence instead of vibes. It bridges low-level object-file knowledge and everyday package maintenance by making debug sections, symbol tables, compile units, `.text`, `.rodata`, Mach-O load commands, and ELF program headers visible in a table humans can act on.

The tool is also a useful counterweight to vague binary-size debates. Package maintainers can compare stripped and unstripped builds, bundled dependencies, LTO changes, debug-info packaging, static-linking choices, and architecture-specific output using one reproducible CLI.

Compared with traditional tools such as `size`, `nm`, `objdump`, `readelf`, or linker map files, Bloaty packages several views into one profiler and preserves totals so the reported rows account for the whole file. That makes it unusually practical for maintainers who need to decide whether a size increase belongs in code, debug metadata, linked libraries, compiler output, or packaging policy.

时间线

  • 2016: Official Google-hosted Bloaty repository created.
  • 2018: Bloaty McBloatface v1.0 released.
  • 2020: Bloaty McBloatface v1.1 released.
  • Package era: Bloaty appears across apk, Homebrew, dnf, MacPorts, Nix, and pacman according to package metadata.

Related projects

  • `size`, `nm`, `objdump`, `readelf`, linker map files, and platform object-file tools are the traditional neighbors Bloaty complements.
  • ELF, DWARF, Mach-O, PE/COFF, and WebAssembly are the binary/debug formats named by Bloaty's official docs.
  • Bloaty bundles or can use dependencies including protobuf, RE2, Capstone, and pkg-config according to its README.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 安装时包含 4 个运行时依赖。
  • 构建元数据列出 2 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
bloatycli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-10
管理器版本1.1
管理器更新时间2026-06-20
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/google/bloaty

安装元数据

软件包元数据

软件包键brew:bloaty
版本1.1
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/bloaty
主页https://github.com/google/bloaty
仓库https://github.com/google/bloaty
上游文档https://github.com/google/bloaty/blob/main/doc/how-bloaty-works.md
许可证Apache-2.0
源码归档https://github.com/google/bloaty/releases/download/v1.1/bloaty-1.1.tar.bz2
最后更新2026-06-20T05:07:42Z
Pulseupdated
依赖abseil, capstone, protobuf, re2
构建依赖cmake, pkgconf
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebloaty
Version Scheme0
Revision50
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

bloaty

nix profile install nixpkgs#bloaty
  • normalized package name match
  • 匹配方式:Bloaty
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bl/bloaty/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

bloaty 1.1-r31

Bloaty McBloatface: a size profiler for binaries

https://github.com/google/bloaty

sudo apk add bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • Source Package: bloaty
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Bloaty
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: bloaty from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf95%

bloaty 1.1-51.fc45

A size profiler for binaries

https://github.com/google/bloaty

sudo dnf install bloaty
  • License: Apache-2.0 AND BSD-2-Clause AND BSD-4-Clause-UC AND BSD-3-Clause
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: bloaty
  • 12 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Bloaty
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: bloaty from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

bloaty 1.1-24

Size profiler for binaries

https://github.com/google/bloaty

sudo pacman -S bloaty
  • License: Apache-2.0
  • Architecture: x86_64
  • 4 依赖
  • normalized package name match
  • 匹配方式:Bloaty
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: bloaty from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

bloaty

sudo port install bloaty
  • normalized package name match
  • 匹配方式:Bloaty
MacPorts ports tree · api.github.com · MacPorts ports tree: devel/bloaty/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment