macOS
Homebrew已验证 · 100%
brew install minisignlocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install minisignMacPorts ports tree · security/minisign/Portfile · 来源: api.github.com
安装
其他安装命令
Linux
Alpine Linux apk已验证 · 92%
sudo apk add minisignAlpine Linux edge package indexes · minisign · 来源: dl-cdn.alpinelinux.org
Debian apt已验证 · 92%
sudo apt install minisignDebian stable package indexes · minisign · 来源: deb.debian.org
Fedora dnf已验证 · 92%
sudo dnf install minisignFedora Rawhide package metadata · minisign · 来源: dl.fedoraproject.org
Nix已验证 · 92%
nix profile install nixpkgs#minisignnixpkgs package indexes · pkgs/by-name/mi/minisign/package.nix · 来源: api.github.com
Arch Linux pacman已验证 · 92%
sudo pacman -S minisignArch Linux sync databases · minisign · 来源: geo.mirror.pkgbuild.com
openSUSE zypper已验证 · 92%
sudo zypper install minisignopenSUSE Tumbleweed package metadata · minisign · 来源: download.opensuse.org
Windows
Scoop已验证 · 92%
scoop install main/minisignScoop official bucket manifest trees · bucket/minisign.json · 来源: api.github.com
Windows Package Manager已验证 · 92%
winget install --id jedisct1.minisign -eWindows Package Manager source index · jedisct1.minisign · 来源: cdn.winget.microsoft.com
概览
软件包摘要
Sign files & verify signatures. Works with signify in OpenBSD
历史
项目历史与用法
Minisign is Frank Denis's portable file-signing and signature-verification tool. It follows the same broad idea as OpenBSD signify: keep release signing small, scriptable, and based on public-key signatures rather than a large certificate or web-of-trust system. The project page describes it as lightweight and built around Ed25519 keys; Homebrew summarizes the package as a tool to sign files and verify signatures that works with OpenBSD signify.
项目历史
Operationally, minisign creates a key pair, signs one or more files into .minisig signature files, and verifies a file using either a public-key file or a public key supplied directly on the command line. A notable part of its format is the trusted comment, which can bind metadata such as filenames, resource identifiers, timestamps, or version numbers to the signature and helps prevent downgrade-style mistakes. Its documented signature format moved toward pre-hashed Ed25519 signatures using Blake2b-512, while retaining awareness of a legacy non-prehashed format.
使用方式
Minisign's ecosystem role is release-integrity plumbing: projects can publish a small public key and detached signatures without adopting a heavier package-signing infrastructure. Its packaging footprint in the input record spans Homebrew, Alpine, Debian, Fedora, MacPorts, Nix, Arch, Scoop, Ubuntu, WinGet, and openSUSE, which fits that role as a small security utility expected to be present across many operating systems.
来源
安全态势
风险级别：绿色
narrow executable package without higher-risk signals.
风险分类器
绿色 风险 · 低 置信度 · appliance
原因
- narrow executable package without higher-risk signals
信号
- metadata:no-higher-risk-signals
安装行为
- formula 元数据中未记录 Homebrew post-install 钩子。
- Homebrew bottle 元数据适用于 8 个平台目标。
- 安装时包含 1 个运行时依赖。
- 构建元数据列出 2 个构建依赖。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
minisign | cli | 全局可执行文件 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-07-08
管理器版本0.12
管理器更新时间
本地数据OK
上游当前
检测到的最新版本0.12
https://github.com/jedisct1/minisign
- 信息No package-manager update timestamp was available.低 置信度
安装元数据
软件包元数据
| 软件包键 | brew:minisign |
|---|---|
| 版本 | 0.12 |
| 软件包管理器 | Homebrew |
| 软件包管理器页面 | https://formulae.brew.sh/formula/minisign |
| 主页 | https://jedisct1.github.io/minisign/ |
| 仓库 | https://github.com/jedisct1/minisign |
| 上游文档 | https://jedisct1.github.io/minisign |
| 许可证 | ISC |
| 源码归档 | https://github.com/jedisct1/minisign/archive/refs/tags/0.12.tar.gz |
| 依赖 | libsodium |
| 构建依赖 | cmake, pkgconf |
| Bottle | 可用 (于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux) |
| Homebrew post-install | 未定义 |
| 服务 | 未声明 |
注册表事实
源数据库详情
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | minisign |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
Debian apt95%
minisign 0.12-1
Dead simple tool to sign files and verify signatures
https://jedisct1.github.io/minisign/
sudo apt install minisign- Section: misc
- Architecture: amd64
- 2 依赖
- normalized package name match
- 匹配方式：Minisign
Nix95%
minisign
nix profile install nixpkgs#minisign- normalized package name match
- 匹配方式：Minisign
Ubuntu apt95%
minisign 0.11-1
Dead simple tool to sign files and verify signatures
https://jedisct1.github.io/minisign/
sudo apt install minisign- Section: universe/misc
- Architecture: amd64
- 2 依赖
- normalized package name match
- 匹配方式：Minisign
apk95%
minisign 0.12-r2
Simple tool to sign files and verify signatures
https://jedisct1.github.io/minisign/
sudo apk add minisign- License: ISC
- Architecture: x86_64
- Source Package: minisign
- 1 依赖
- 1 提供
- normalized package name match
- 匹配方式：Minisign
apk95%
minisign-doc 0.12-r2
Simple tool to sign files and verify signatures (documentation)
https://jedisct1.github.io/minisign/
sudo apk add minisign-doc- License: ISC
- Architecture: x86_64
- Source Package: minisign
- normalized package name match
- 匹配方式：Minisign
dnf95%
minisign 0.12-3.fc44
A dead simple tool to sign files and verify digital signatures
https://github.com/jedisct1/minisign
sudo dnf install minisign- License: ISC
- Category: Unspecified
- Architecture: x86_64
- Source Package: minisign
- 3 依赖
- 1 提供
- normalized package name match
- 匹配方式：Minisign
pacman95%
minisign 0.12-2
A dead-simple tool to sign files and verify digital signatures
https://github.com/jedisct1/minisign
sudo pacman -S minisign- License: ISC
- Architecture: x86_64
- 1 依赖
- normalized package name match
- 匹配方式：Minisign
zypper95%
minisign 0.12-2.3
A dead simple tool to sign files and verify signatures
https://jedisct1.github.io/minisign/
sudo zypper install minisign- License: ISC
- Category: Productivity/Networking/Security
- Architecture: x86_64
- Source Package: minisign
- 2 依赖
- 1 提供
- normalized package name match
- 匹配方式：Minisign
MacPorts95%
minisign
sudo port install minisign- normalized package name match
- 匹配方式：Minisign
Scoop95%
main/minisign
scoop install main/minisign- normalized package name match
- 匹配方式：Minisign
winget95%
jedisct1.minisign
winget install --id jedisct1.minisign -e- normalized package name match
- 匹配方式：Minisign
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment