Automic VaultAutomic Vault

brew

使用 Homebrew, apk, MacPorts, Nix, winget 安装 carapace

查看 carapace 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install carapace

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install carapace

MacPorts ports tree · sysutils/carapace/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%
sudo apk add carapace

Alpine Linux edge package indexes · carapace · 来源: dl-cdn.alpinelinux.org

Nix已验证 · 92%
nix profile install nixpkgs#carapace

nixpkgs package indexes · pkgs/by-name/ca/carapace/package.nix · 来源: api.github.com

Windows

Windows Package Manager已验证 · 92%
winget install --id rsteube.Carapace -e

Windows Package Manager source index · rsteube.Carapace · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Multi-shell multi-command argument completer

命令和别名

  • carapace

历史

项目历史与用法

carapace is a Go-based multi-shell argument completer distributed as the carapace-bin package. It exists in the long tradition of shell completion frameworks, but its package-nerd hook is that one completion engine can target many shells instead of requiring a separate completion script style for Bash, Zsh, Fish, PowerShell, Nushell, Xonsh, Elvish, and others.

项目历史

The public carapace-bin repository was created on GitHub in April 2020. Its README describes the project as a multi-shell completion binary, and the repository topics show the project deliberately spans many shell ecosystems rather than being tied to a single command-line environment.

The project grew around two related surfaces: a collection of completers for existing CLI tools and a specification system for adding custom completions. Its documentation is published as an mdBook site, and the README points users to install and setup pages rather than treating the GitHub README as the only manual.

采用历史

The project is packaged across multiple operating-system package channels. The supplied Homebrew source facts list Homebrew, Alpine, MacPorts, Nix, and winget package mappings, while the upstream README includes a Repology packaging badge, signaling that distribution packaging is part of the project's public identity.

Adoption has been strongest among users who move between shells or who want richer completion behavior without writing shell-specific scripts. The upstream README's supported-shell list includes both traditional shells and newer interactive shells, which is the core adoption story for carapace.

使用方式

Users install the carapace binary, enable it for their shell, and then use it to provide argument completions for supported commands. The upstream README links to the official install and setup documentation, and the official completers page documents the list of commands covered by the project.

For package maintainers and power users, carapace is also interesting because completions can be specified outside a single shell's scripting language, making it useful when a command-line tool needs completions across several shell communities.

为什么软件包爱好者会关心

carapace matters to package nerds because shell completion is often the forgotten layer between a package and its users. A package that ships a good binary but poor completions feels worse in day-to-day terminal use, and carapace offers a shared completion layer that package managers can distribute like any other CLI tool.

Its significance also comes from cross-shell normalization. Package repositories normally have to care about Bash, Zsh, Fish, PowerShell, and newer shells separately; carapace turns that messy edge of packaging into a dedicated, versioned tool.

时间线

  • 2020: carapace-bin repository created on GitHub.
  • 2022: GitHub releases page shows published carapace-bin release tags by at least v0.11.0.
  • 2026: GitHub repository metadata shows the project still active, with shell-completion topics and ongoing updates.

Related projects

  • carapace is related to shell-native completion systems for Bash, Zsh, Fish, PowerShell, Nushell, Elvish, Xonsh, Oil, Tcsh, Ion, and Cmd, all of which are listed in the upstream README as supported or experimental shells.
  • It is also related to package-manager completion distribution: Homebrew, Alpine, MacPorts, Nix, and winget mappings in the supplied source facts show how the same completion binary reaches users through several ecosystems.

安全态势

风险级别:yellow

generalized runtime or code generation signal.

风险分类器

yellow 风险 · 中 置信度 · runtime

原因

  • generalized runtime or code generation signal

信号

  • text:shell

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
${UserConfigDir}/carapace${UserConfigDir}/carapace/specs${UserConfigDir}/carapace/variables/{group}.yaml${UserConfigDir}/carapace/bridge

可执行文件

已安装的可执行文件

命令类型暴露范围备注
carapacecli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-25
管理器版本1.7.3
管理器更新时间2026-06-30
本地数据OK
上游当前
检测到的最新版本v1.7.3

https://github.com/carapace-sh/carapace-bin

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:carapace
版本1.7.3
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/carapace
主页https://carapace.sh
仓库https://github.com/carapace-sh/carapace-bin
上游文档https://carapace-sh.github.io/carapace-bin
许可证MIT
源码归档https://github.com/carapace-sh/carapace-bin/archive/refs/tags/v1.7.3.tar.gz
最后更新2026-06-30T23:54:20Z
Pulseupdated
构建依赖go
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecarapace
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

carapace

nix profile install nixpkgs#carapace
  • normalized package name match
  • 匹配方式:Carapace
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/carapace/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

carapace 1.5.7-r5

Multi-shell multi-command argument completer

https://carapace.sh/

sudo apk add carapace
  • License: MIT
  • Architecture: x86_64
  • Source Package: carapace
  • 1 依赖
  • 1 提供
  • normalized package name match
  • 匹配方式:Carapace
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: carapace from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
MacPorts95%

carapace

sudo port install carapace
  • normalized package name match
  • 匹配方式:Carapace
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/carapace/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
winget95%

rsteube.Carapace

winget install --id rsteube.Carapace -e
  • normalized package name match
  • 匹配方式:Carapace
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: rsteube.Carapace from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment