brew

使用 Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget 安装 curl

查看 curl 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

代理安全

代理安全回答

curl can fetch remote scripts, call APIs, and exfiltrate data from files an agent can read.

凭据访问

Reads netrc files, headers, cookies, tokens, and files used as request bodies.

远程变更

Can call arbitrary HTTP APIs that mutate remote systems.

发布/制品风险

Can upload artifacts or run installer pipelines when paired with a shell.

代理使用指南

Allow simple public fetches; require approval for authenticated requests, uploads, and shell execution.

安装

其他安装命令

macOS

Homebrew已验证 · 100%

brew install curl

local Homebrew formula metadata

MacPorts已验证 · 94%

sudo port install curl

MacPorts ports tree · net/curl/Portfile · 来源: api.github.com

Linux

Alpine Linux apk已验证 · 92%

sudo apk add curl

Alpine Linux edge package indexes · curl · 来源: dl-cdn.alpinelinux.org

Debian apt已验证 · 92%

sudo apt install curl

Debian stable package indexes · curl · 来源: deb.debian.org

Fedora dnf已验证 · 92%

sudo dnf install curl

Fedora Rawhide package metadata · curl · 来源: dl.fedoraproject.org

Nix已验证 · 92%

nix profile install nixpkgs#curl

nixpkgs package indexes · curl · 来源: raw.githubusercontent.com

Arch Linux pacman已验证 · 92%

sudo pacman -S curl

Arch Linux sync databases · curl · 来源: geo.mirror.pkgbuild.com

openSUSE zypper已验证 · 92%

sudo zypper install curl

openSUSE Tumbleweed package metadata · curl · 来源: download.opensuse.org

Windows

Chocolatey已验证 · 92%

choco install curl

Chocolatey community package catalog · curl · 来源: community.chocolatey.org

Scoop已验证 · 92%

scoop install main/curl

Scoop official bucket manifest trees · bucket/curl.json · 来源: api.github.com

Windows Package Manager已验证 · 92%

winget install --id cURL.cURL -e

Windows Package Manager source index · cURL.cURL · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Get a file from an HTTP, HTTPS or FTP server

项目链接

命令和别名

curl
curl-config
wcurl

历史

项目历史与用法

curl is a command-line transfer tool and libcurl is its underlying URL transfer library. Together they became one of the default pieces of Internet plumbing in Unix-like systems, Windows, language runtimes, build systems, containers, and scripts.

项目历史

curl traces back to late 1996, when Daniel Stenberg extended Rafael Sagula's HttpGet utility while building an IRC bot feature for currency exchange lookups. The project moved from HttpGet to urlget as protocols beyond HTTP were added, then became curl in March 1998 after upload support made the older name misleading.

采用历史

The project history records early Linux RPM packaging in 1998, the first Debian package in 1999, a non-beta libcurl interface in 2000, PHP adopting libcurl the same year, and Mac OS X bundling curl in 2001. By 2018, curl's history page described it as shipped in Windows 10 and estimated curl and libcurl at five billion installed instances; by 2020 that estimate reached ten billion instances.

使用方式

curl is used interactively and in scripts to transfer data over URL-addressed protocols, especially HTTP(S), FTP(S), SMTP, IMAP, SFTP, WebSocket, and related network protocols. libcurl is embedded by applications that need the same transfer features through a stable C API.

为什么软件包爱好者会关心

curl matters to package managers because it is often both a package and a bootstrap tool: build scripts fetch with it, test suites depend on it, and other packages link against libcurl. Packaging has to track TLS backends, protocol feature flags, CA certificate behavior, ABI stability, and the split between the curl executable, libcurl, headers, and curl-config.

时间线

1996: HttpGet 0.1 released; Daniel Stenberg soon becomes maintainer.
1998: curl 4 released under the curl name.
1999: First Debian package recorded in upstream history.
2000: libcurl non-beta interface arrives and PHP adopts libcurl.
2001: curl bundled in Mac OS X 10.1.
2010: Project switches from CVS to git hosted by GitHub.
2018: Windows 10 starts shipping curl.
2020: Upstream estimates 10 billion curl and libcurl installations worldwide.
2024: wcurl adopted into the curl organization.

Related projects

libcurl, wcurl, trurl, HTTPie, Curlie, and cURLpp are adjacent projects in the curl ecosystem.

来源

安全态势

风险级别：blue

doc example: network transfer tool.

风险分类器

blue 风险 · 高置信度 · tool

原因

doc example: network transfer tool

信号

override:curl

安装行为

formula 元数据中未记录 Homebrew post-install 钩子。
Homebrew bottle 元数据适用于 6 个平台目标。
安装时包含 8 个运行时依赖。
构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: ~/.curlrc

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: ~/.netrc~/.curlrc

可执行文件

已安装的可执行文件

命令	类型	暴露范围
`curl`	cli	全局可执行文件
`curl-config`	cli	全局可执行文件
`wcurl`	cli	全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-07-10

管理器版本8.21.0

管理器更新时间2026-06-27

本地数据OK

上游not checked

检测到的最新版本未检测到

https://curl.se

信息Release/tag comparison is only available for GitHub repositories.https://curl.senone 置信度

安装元数据

软件包元数据

软件包键	brew:curl
版本	8.21.0
软件包管理器	Homebrew
软件包管理器页面	https://formulae.brew.sh/formula/curl
主页	https://curl.se
仓库	https://github.com/curl/curl
上游文档	https://curl.se/docs
许可证	curl
源码归档	https://curl.se/download/curl-8.21.0.tar.bz2
最后更新	2026-06-27T15:50:29Z
Pulse	updated
依赖	brotli, libnghttp2, libnghttp3, libngtcp2, libpsl, libssh2, openssl@3, zstd
构建依赖	pkgconf
macOS 提供的库	krb5, openldap
Bottle	可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-install	未定义
服务	未声明

注册表事实

源数据库详情

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	curl
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	yes
URL Keys	head stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Debian apt95%

curl 8.14.1-2+deb13u3

command line tool for transferring data with URL syntax