Automic VaultAutomic Vault

brew

使用 Homebrew, Nix, winget 安装 weaver

查看 weaver 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install weaver

local Homebrew formula metadata

Linux

Nix已验证 · 92%
nix profile install nixpkgs#weaver

nixpkgs package indexes · pkgs/by-name/we/weaver/package.nix · 来源: api.github.com

Windows

Windows Package Manager已验证 · 92%
winget install --id OpenTelemetry.Weaver -e

Windows Package Manager source index · OpenTelemetry.Weaver · 来源: cdn.winget.microsoft.com

概览

软件包摘要

Command-line tool for Weaver

命令和别名

  • weaver

历史

项目历史与用法

Weaver is Scribd's declarative dependency-injection framework and command-line code generator for Swift projects. It scans Swift sources for dependency annotations, builds a dependency graph, validates it at compile time, and generates the boilerplate needed to wire dependencies into iOS, macOS, and Linux Swift code.

The package's command-line identity matters: the brew formula installs the weaver executable that runs in an Xcode build phase or from developer tooling to generate Swift source before compilation.

项目历史

Scribd introduced Weaver publicly in 2018 in a technology blog post titled 'A Painless Dependency Injection Framework for Swift.' The post framed Weaver as a response to growing Swift applications where manual dependency passing and singleton fallback patterns become hard to maintain.

The original design used comment annotations such as weaver: movieManager <- MovieManaging to declare dependencies in source code. The README later describes both property-wrapper and comment-based declarations, SourceKitten-backed scanning via Apple's SourceKit, dependency-graph linking, validation, and generated source output.

The project was eventually deprecated by Scribd. The current README begins with a deprecation notice saying Scribd no longer uses the technology internally, has decided to archive the repository, and will leave the code and resources available for reference or independent forks.

采用历史

Weaver's adoption was strongest in the Swift/iOS architecture community rather than across general-purpose backend development. Its README links tutorials, a demo video, and an SF SLUG talk about maintaining a dependency graph with Weaver.

Its value proposition was compile-time safety. The Scribd blog contrasts Weaver with dependency-injection containers that can crash at runtime, arguing that Weaver validates the graph before the app runs and lets dependencies remain non-optional.

使用方式

A typical project adds Weaver to an Xcode build phase before Compile Sources, then invokes weaver swift with project and output paths. The generated dependency container code is compiled with the application, giving app code typed access to registered dependencies.

Weaver can be installed through Homebrew, CocoaPods, Mint, prebuilt release binaries, or from source. The README notes that CocoaPods was useful when a project needed a specific Weaver version because Homebrew did not automatically install specific historical versions.

为什么软件包爱好者会关心

Weaver is notable as an iOS-era code-generation answer to dependency injection: instead of relying on reflection-heavy runtime containers, it uses Swift source scanning and compile-time generated containers to keep app wiring explicit and type checked.

Its deprecation also makes it useful history. It captures a period before Swift macros and newer DI patterns, when SourceKit-based tooling and build-phase generators were a common way to add static analysis and boilerplate generation to Swift projects.

时间线

  • 2018: Scribd introduces Weaver as a lightweight dependency-injection framework for Swift.
  • 2018-2019: Scribd publishes tutorial material showing Weaver in iOS dependency-injection and unit-testing workflows.
  • Later project history: the README gains a deprecation notice stating that Scribd no longer uses Weaver internally and has archived the project for reference.

Related projects

  • Weaver is related to Swift, SourceKit, SourceKitten, Xcode build phases, CocoaPods, Mint, Swinject, and other dependency-injection approaches for iOS and macOS applications.

安全态势

风险级别:绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 6 个平台目标。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
weavercli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-07-25
管理器版本1.1.7
管理器更新时间
本地数据OK
上游当前
检测到的最新版本1.1.7

https://github.com/scribd/Weaver

  • 信息No package-manager update timestamp was available.低 置信度

安装元数据

软件包元数据

软件包键brew:weaver
版本1.1.7
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/weaver
主页https://github.com/scribd/Weaver
仓库https://github.com/scribd/Weaver
上游文档https://github.com/scribd/Weaver#readme
许可证MIT
源码归档https://github.com/scribd/Weaver/archive/refs/tags/1.1.7.tar.gz
macOS 提供的库swift
Bottle可用 (于 arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameweaver
Version Scheme0
Revision0
Conflicts With
  • service-weaver
Requirements
  • macos
  • xcode
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。

Nix95%

weaver

nix profile install nixpkgs#weaver
  • normalized package name match
  • 匹配方式:Weaver
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/we/weaver/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
winget95%

OpenTelemetry.Weaver

winget install --id OpenTelemetry.Weaver -e
  • normalized package name match
  • 匹配方式:Weaver
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: OpenTelemetry.Weaver from https://cdn.winget.microsoft.com/cache/source.msix

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment