Automic VaultAutomic Vault

brew

使用 Homebrew, Nix, pacman, apt, winget 安装 cargo-dist

查看 cargo-dist 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install cargo-dist

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#cargo-dist

nixpkgs package indexes · pkgs/by-name/ca/cargo-dist/package.nix · 来源: api.github.com

Arch Linux pacman已验证 · 92%
sudo pacman -S cargo-dist

Arch Linux sync databases · cargo-dist · 来源: geo.mirror.pkgbuild.com

Debian apt已验证 · 92%
sudo apt install dist

Debian stable package indexes · dist · 来源: deb.debian.org

Windows

Windows Package Manager已验证 · 92%
winget install --id axodotdev.dist -e

Windows Package Manager source index · axodotdev.dist · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Tool for building final distributable artifacts and uploading them to an archive

历史

项目历史与用法

cargo-dist, now branded in its README as `dist`, is a release and binary-distribution tool from Axo that generates shippable artifacts, installers, release manifests, and CI workflows for Rust and other projects. It occupies the packaging layer between `cargo build` and public distribution channels such as GitHub Releases and package managers.

项目历史

The cargo-dist crate appeared on crates.io in September 2022, and the GitHub repository was created in October 2022. Its early identity was tightly Rust-centered, but the official README now labels the project `dist (formerly known as cargo-dist)`, reflecting its wider release-engineering ambitions.

The README describes the project as a tool that plans, builds, hosts, publishes, and announces releases. A defining design choice is generated CI: `dist init` can generate release workflows that wait for version tags, build artifacts on multiple platforms, create or edit GitHub Releases, and attach generated release notes and artifacts.

The project also documents self-hosting: dist's own releases are produced through dist-generated release machinery, with cargo-release used for version and changelog mechanics.

采用历史

cargo-dist grew as Rust CLI authors wanted repeatable binary releases without maintaining bespoke GitHub Actions matrices and installer scripts. The supplied package-manager facts show packaging across Homebrew, Debian/Ubuntu as `dist`, Nix, Arch Linux, and winget, indicating adoption beyond the Rust-only install path.

crates.io records more than one hundred thousand downloads, while the GitHub repository has thousands of stars. That combination of registry use, cross-platform package-manager presence, and generated CI support makes it one of the more visible Rust-origin release automation tools.

使用方式

A typical user initializes configuration with `dist init`, commits the generated configuration and CI workflow, then publishes by pushing a version tag. dist plans the release, builds archives and installers, produces a machine-readable manifest, and can host artifacts on a GitHub Release.

Configuration can live in Cargo.toml, package.json, dist-workspace.toml, or dist.toml, which matches the project's move from a Cargo-only helper toward a general binary distribution tool.

为什么软件包爱好者会关心

cargo-dist matters to package nerds because it treats release artifacts as first-class package metadata: archives, installers, checksums, changelogs, manifests, hosting locations, and package-manager publishing become a repeatable graph instead of ad hoc release notes.

It also captures a common Rust ecosystem pattern: a tool starts as a Cargo subcommand, then expands into broader developer tooling while keeping Cargo workspace integration as a core path.

时间线

  • 2022: cargo-dist crate first published on crates.io.
  • 2022: axodotdev/cargo-dist GitHub repository created.
  • 2024: README documents generated CI workflows, installers, release manifests, package publishing, and self-hosted releases.
  • 2026: crates.io metadata shows active updates and the 0.32.x release line.

Related projects

  • oranda is referenced by the README as a companion for generated project websites.
  • cargo-release is documented in the repository's release workflow for version, changelog, and tag mechanics.
  • GitHub Releases and GitHub Actions are central hosting and CI targets in the official documentation.

安全态势

风险级别:blue

broad file, network, media, or database tool signal.

风险分类器

blue 风险 · 中 置信度 · tool

原因

  • broad file, network, media, or database tool signal

信号

  • text:upload,archive

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
Cargo.tomlpackage.jsondist-workspace.tomldist.toml

可执行文件

已安装的可执行文件

命令类型暴露范围备注
distcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-25
管理器版本0.32.0
管理器更新时间2026-05-22
本地数据OK
上游当前
检测到的最新版本v0.32.0

https://github.com/axodotdev/cargo-dist

  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:cargo-dist
版本0.32.0
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/cargo-dist
主页https://axodotdev.github.io/cargo-dist/
仓库https://github.com/axodotdev/cargo-dist
上游文档https://axodotdev.github.io/cargo-dist/book
许可证Apache-2.0 OR MIT
源码归档https://github.com/axodotdev/cargo-dist/archive/refs/tags/v0.32.0.tar.gz
最后更新2026-05-22T09:34:54Z
Pulseupdated
构建依赖rust
Bottle可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namecargo-dist
Version Scheme0
Revision0
Head VersionHEAD
Conflicts With
  • nmh
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

cargo-dist

nix profile install nixpkgs#cargo-dist
  • normalized package name match
  • 匹配方式:Cargo Dist
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/cargo-dist/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

cargo-dist 0.32.0-1

Shippable application packaging for Rust

https://github.com/axodotdev/cargo-dist

sudo pacman -S cargo-dist
  • License: Apache-2.0 AND MIT
  • Architecture: x86_64
  • 3 依赖
  • normalized package name match
  • 匹配方式:Cargo Dist
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: cargo-dist from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Debian apt92%

dist 1:3.5-236-1.1

Tools for developing, maintaining and distributing software

sudo apt install dist
  • Section: devel
  • Architecture: all
  • 4 依赖
  • installed executable or alias match
  • 匹配方式:Dist
Debian stable package indexes · deb.debian.org · Debian stable package indexes: dist from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Ubuntu apt92%

dist 1:3.5-236-1

Tools for developing, maintaining and distributing software

sudo apt install dist
  • Section: universe/devel
  • Architecture: all
  • 4 依赖
  • installed executable or alias match
  • 匹配方式:Dist
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: dist from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
winget92%

axodotdev.dist

winget install --id axodotdev.dist -e
  • installed executable or alias match
  • 匹配方式:Dist
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: axodotdev.dist from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment