# 使用 Homebrew, apt, MacPorts, Nix, pacman, zypper 安装 splint 查看 splint 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。 ## 安装 ```sh sudo av install brew:splint ``` 其他安装命令: ### macOS - Homebrew (100%): ```sh brew install splint ``` 证据: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install splint ``` 证据: MacPorts ports tree: devel/splint/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - Debian apt (92%): ```sh sudo apt install splint ``` 证据: Debian stable package indexes: splint from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#splint ``` 证据: nixpkgs package indexes: splint from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S splint ``` 证据: Arch Linux sync databases: splint from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install splint ``` 证据: openSUSE Tumbleweed package metadata: splint from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst ## 软件包事实 - **软件包键:** brew:splint - **软件包管理器:** Homebrew - **软件包管理器页面:** - **版本:** 3.1.2 - **来源摘要:** Secure Programming Lint - **主页:** - **仓库:** - **上游文档:** - **许可证:** GPL-2.0-or-later - **源码归档:** - **最后更新:** 2026-06-22T14:06:21-07:00 - **已生成:** 2026-07-25T07:20:51+00:00 ## 可执行文件 - splint (cli) - splint (别名) ## macOS 提供的库 - flex ## 安装行为 - post-install 钩子: 未定义 - Bottle: 可用 于 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura ## 版本和新鲜度 - 页面生成时间: 2026-07-25 - 管理器版本: 3.1.2 - 管理器更新时间: 2026-06-22 - 本地数据: OK - 上游仓库: https://splint.org/ - 信息: Release/tag comparison is only available for GitHub repositories. ## 项目历史与用法 Splint, short for Secure Programming Lint, is an annotation-assisted static checker for C programs that extends the traditional Unix lint idea into security and stronger interface checking. ### 项目历史 Splint came from the University of Virginia Inexpensive Program Analysis Group and the earlier LCLint research line. The official publications page traces LCLint work back through a 1994 FSE paper and a 1996-2000 LCLint user's guide, while the Splint release notes describe Splint 3.0.1 in January 2002 as the successor to LCLint 2.5q. The project framed itself as lightweight rather than heavyweight formal verification: with little setup it could act as a better lint, and with source annotations it could check stronger assumptions about nullness, memory ownership, buffer sizes, and interfaces. Version 3.1.2 was released in July 2007, and the official homepage now points to a GitHub source repository plus historical source distributions. ### 采用历史 Splint's package-manager presence in the supplied input spans Homebrew, Debian, Ubuntu, MacPorts, Nix, Arch, and openSUSE-family packaging. Its adoption is mostly historical and educational now, but it remains packaged because it is a recognizable classic in C static analysis and secure-programming coursework. ### 使用方式 Users run `splint` against C source files and adjust checking with command-line flags, annotations in stylized comments, and `.splintrc` files. The manual documents loading `~/.splintrc` and then a working-directory `.splintrc`, with command-line flags overriding both. ### 为什么软件包爱好者会关心 Splint matters to package nerds because it is a fossil record of the path from Unix `lint` to annotation-assisted security checking. It is small, old, GPL-licensed, and still installable, which makes it useful for archaeology, examples, and comparing modern static analyzers against earlier C tooling. ### 时间线 - 1994: LCLint is presented at FSE as a tool for using specifications to check code. - 1996-2000: The LCLint user's guide covers the predecessor tool later superseded by the Splint manual. - 2002: Splint 3.0.1 is released as the successor to LCLint 2.5q. - 2003: Splint manual version 3.1.1-1 is published. - 2007: Splint 3.1.2 is released. ### Related projects - LCLint is the direct predecessor documented by the official Splint publications and release pages. - Traditional Unix lint is the cultural baseline: Splint's homepage explicitly presents it as usable as a better lint with minimal effort. ### 来源 - - - - - source_facts.package-manager ## 安全说明 没有找到 splint 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。 ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: .splintrc, ~/.splintrc ## 源数据库详情 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** splint - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## 其他软件包管理器记录 - Debian apt - splint - 1:3.1.2+dfsg-5: normalized package name match | Debian stable package indexes: splint from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for statically checking C programs for bugs | http://www.splint.org/ - Debian apt - splint-data - 1:3.1.2+dfsg-5: normalized package name match | Debian stable package indexes: splint-data from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for statically checking C programs for bugs - data files | http://www.splint.org/ - Debian apt - splint-doc-html - 1:3.1.2+dfsg-5: normalized package name match | Debian stable package indexes: splint-doc-html from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | tool for statically checking C programs for bugs - HTML documentation | http://www.splint.org/ - Nix - splint: normalized package name match | nixpkgs package indexes: splint from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - splint - 1:3.1.2+dfsg-5: normalized package name match | Ubuntu 24.04 LTS package indexes: splint from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for statically checking C programs for bugs | http://www.splint.org/ - Ubuntu apt - splint-data - 1:3.1.2+dfsg-5: normalized package name match | Ubuntu 24.04 LTS package indexes: splint-data from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for statically checking C programs for bugs - data files | http://www.splint.org/ - Ubuntu apt - splint-doc-html - 1:3.1.2+dfsg-5: normalized package name match | Ubuntu 24.04 LTS package indexes: splint-doc-html from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | tool for statically checking C programs for bugs - HTML documentation | http://www.splint.org/ - pacman - splint - 3.1.2.git20180129-3: normalized package name match | Arch Linux sync databases: splint from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A tool for statically checking C programs for security vulnerabilities and coding mistakes | https://repo.or.cz/splint-patched.git - zypper - splint - 3.1.2-104.2: normalized package name match | openSUSE Tumbleweed package metadata: splint from https://download.opensuse.org/tumbleweed/repo/oss/repodata/be8d3611d25469107f32075a1697e69ec57a2b850b42348a658cc671ad5ec2b50760d02c3e59524d50da9a11d5be799bdaffba2e166e8ca8858512e3c0bd665d-primary.xml.zst | A tool for statically checking C programs | http://www.splint.org/ - MacPorts - splint: normalized package name match | MacPorts ports tree: devel/splint/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## 相关链接 - [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://www.automicvault.com/zh-hans/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Developer build packages](https://www.automicvault.com/zh-hans/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [Networking and protocol packages](https://www.automicvault.com/zh-hans/pkg/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [cflow](https://www.automicvault.com/zh-hans/pkg/brew/cflow/) - Shares av.db curated category or tags: c, cli, developer-tools, static-analysis. - [coccinelle](https://www.automicvault.com/zh-hans/pkg/brew/coccinelle/) - Shares av.db curated category or tags: c, cli, developer-tools, static-analysis. - [cppcheck](https://www.automicvault.com/zh-hans/pkg/brew/cppcheck/) - Shares av.db curated category or tags: c, cli, developer-tools, static-analysis. - [datadog-static-analyzer](https://www.automicvault.com/zh-hans/pkg/brew/datadog-static-analyzer/) - Shares av.db curated category or tags: cli, developer-tools, security, static-analysis. - [esbmc](https://www.automicvault.com/zh-hans/pkg/brew/esbmc/) - Shares av.db curated category or tags: c, cli, developer-tools, static-analysis. - [kube-score](https://www.automicvault.com/zh-hans/pkg/brew/kube-score/) - Shares av.db curated category or tags: cli, developer-tools, security, static-analysis. - [scalastyle](https://www.automicvault.com/zh-hans/pkg/brew/scalastyle/) - Shares av.db curated category or tags: cli, developer-tools, lint, static-analysis. - [semgrep](https://www.automicvault.com/zh-hans/pkg/brew/semgrep/) - Shares av.db curated category or tags: cli, developer-tools, security, static-analysis. ## Combined YAML source View the package source record on GitHub. [combined/splint.yml](https://github.com/automic-vault/db/blob/main/combined/splint.yml) ## 来源 - Nucleus package database - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - av.db category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph