Automic VaultAutomic Vault

brew

使用 Homebrew, Nix 安装 stuffbin

查看 stuffbin 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install stuffbin

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#stuffbin

nixpkgs package indexes · pkgs/by-name/st/stuffbin/package.nix · 来源: api.github.com

概览

软件包摘要

Compress and embed static files and assets into Go binaries

命令和别名

  • stuffbin

历史

项目历史与用法

stuffbin is a small Go utility and package for compressing static assets and appending them to Go binaries, then exposing them through a virtual filesystem at runtime.

项目历史

The official README describes stuffbin as both a command-line utility and Go package for embedding static files into binaries. It says the project was inspired by zgok, with a simpler design and different abstractions.

The README was updated in June 2026 to say the project appears feature complete, with no changes required in roughly three years, while still being used in critical production systems.

采用历史

The input package facts list stuffbin in Homebrew and Nix, which is consistent with a niche developer tool whose audience is Go application packagers rather than general end users.

Go 1.16 introduced native //go:embed support, and the README positions stuffbin against that built-in feature by emphasizing ZIP compression, dynamic embedding, path aliases, and embedding files outside the package directory.

使用方式

A typical stuffbin workflow builds a Go binary, runs stuffbin to append compressed assets, and then has the application read those assets back from itself through stuffbin's filesystem abstraction.

It is most relevant for distributing single-binary Go services with web assets, templates, or other static files while retaining a local-filesystem fallback during development.

为什么软件包爱好者会关心

stuffbin matters to package nerds because it sits at the boundary between application packaging and language tooling: it changes what a Go binary can carry without requiring an external asset directory.

Its continued niche after //go:embed is the interesting bit: package maintainers care about compression, dynamic post-build stuffing, and layouts that Go's native embedding deliberately restricts.

时间线

  • 2021: Go 1.16 introduced //go:embed, later documented by stuffbin as the native feature it compares against.
  • 2026: The official README described stuffbin as feature complete and still used in critical production systems.

Related projects

  • Go's //go:embed is the native alternative discussed by the README.
  • zgok is named by the README as an inspiration for stuffbin.

安全态势

风险级别:blue

broad file, network, media, or database tool signal.

风险分类器

blue 风险 · 中 置信度 · tool

原因

  • broad file, network, media, or database tool signal

信号

  • text:compress

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 10 个平台目标。
  • 构建元数据列出 1 个构建依赖。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
stuffbincli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-08
管理器版本1.3.0
管理器更新时间
本地数据OK
上游当前
检测到的最新版本v1.3.0

https://github.com/knadh/stuffbin

  • 信息No package-manager update timestamp was available.低 置信度

安装元数据

软件包元数据

软件包键brew:stuffbin
版本1.3.0
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/stuffbin
主页https://github.com/knadh/stuffbin
仓库https://github.com/knadh/stuffbin
上游文档https://github.com/knadh/stuffbin#readme
许可证MIT
源码归档https://github.com/knadh/stuffbin/archive/refs/tags/v1.3.0.tar.gz
构建依赖go
Bottle可用 (于 arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, monterey, sonoma, ventura, x86_64_linux)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namestuffbin
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

stuffbin

nix profile install nixpkgs#stuffbin
  • normalized package name match
  • 匹配方式:Stuffbin
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/st/stuffbin/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment