macOS
Homebrewverifiziert · 100%
brew install libjcatlocal Homebrew formula metadata
brew / Rang 4346
libjcat mit Homebrew, apk, dnf, Nix, pacman, apt, zypper installieren
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für libjcat in AI-Agent-Workflows.
Installation
Weitere Installationsbefehle
Linux
Alpine Linux apkverifiziert · 92%
sudo apk add libjcatAlpine Linux edge package indexes · libjcat · Quelle: dl-cdn.alpinelinux.org
Fedora dnfverifiziert · 92%
sudo dnf install libjcatFedora Rawhide package metadata · libjcat · Quelle: dl.fedoraproject.org
Nixverifiziert · 92%
nix profile install nixpkgs#libjcatnixpkgs package indexes · pkgs/by-name/li/libjcat/package.nix · Quelle: api.github.com
Arch Linux pacmanverifiziert · 92%
sudo pacman -S libjcatArch Linux sync databases · libjcat · Quelle: geo.mirror.pkgbuild.com
Debian aptverifiziert · 92%
sudo apt install gir1.2-jcat-1.0Debian stable package indexes · gir1.2-jcat-1.0 · Quelle: deb.debian.org
openSUSE zypperverifiziert · 92%
sudo zypper install jcat-toolopenSUSE Tumbleweed package metadata · jcat-tool · Quelle: download.opensuse.org
Überblick
Paketzusammenfassung
Library for reading Jcat files
Projektlinks
Befehle und Aliase
- jcat-tool
Verlauf
Projektgeschichte und Nutzung
libjcat is a small GObject-oriented library and command-line tool for reading and writing gzip-compressed JSON catalog files. Its niche is software-integrity metadata: a Jcat file can collect checksums and detached signatures for the files in an archive, with support for SHA checksums, GPG signatures, and PKCS#7 signatures.
Projektgeschichte
Richard Hughes published libjcat as a standalone project in 2020, splitting a catalog-signature concern that matters to firmware distribution into a reusable library. The README describes the format as equivalent in purpose to Microsoft Windows catalog files, but represented as gzipped JSON divided into JcatFile, JcatItem, and JcatBlob objects.
The project grew around firmware-update workflows. Its examples show firmware payloads and metainfo XML carried as catalog items, then signed or verified with local self-signing keys, explicit public keys, or imported detached signatures.
Adoptionsgeschichte
libjcat matters mostly because of fwupd and the Linux Vendor Firmware Service ecosystem. fwupd documentation explains that LVFS adds a .jcat file to uploaded firmware archives so original firmware and metadata are not modified while checksums and detached signatures remain verifiable.
Homebrew, Debian, Fedora, Arch, Nix, Alpine, Ubuntu, and openSUSE package it, which reflects its role as a small shared dependency for firmware and software-integrity tooling rather than as an end-user application.
Wie es verwendet wird
Users usually meet libjcat through jcat-tool, which can create a catalog, add checksums, sign payloads, import detached signatures, export signature blobs, and verify a catalog against a public certificate. Version 2.0.0 added support for signing the checksum of a large payload instead of loading the whole payload for signature verification.
Warum Paket-Nerds sich dafür interessieren
For package maintainers, libjcat is interesting because it packages a Windows-like catalog-signature idea in a Unix-friendly library with introspection bindings and a tiny CLI. It is one of those dependencies that looks obscure until a firmware update path needs detached integrity metadata that survives archive repacking.
Zeitleiste
- 2020-03-23: libjcat 0.1.0 release commit.
- 2020: README examples document firmware.bin and firmware.metainfo.xml as typical Jcat archive items.
- 2022-03-22: libjcat 0.1.11 release commit.
- 2023-12-15: README examples document signing the checksum target for large payloads, noting the feature requires JCat 2.0.0 or newer.
Related projects
- fwupd and LVFS are the most visible related projects because they use Jcat files for firmware metadata and payload signature handling. GnuTLS certtool, GPG, PKCS#7, and AppStream-style firmware metadata sit around the same workflow.
Quellen
Sicherheitslage
Risikostufe: grün
library-like package without higher-risk signals.
Risikoklassifikator
grün Risiko · niedrig Konfidenz · appliance
Warum
- library-like package without higher-risk signals
Signale
- metadata:library-like
Installationsverhalten
- In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
- Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
- Installiert mit 4 Laufzeitabhängigkeiten.
- Build-Metadaten listen 6 Build-Abhängigkeiten.
Empfohlene Prüfung
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
Executables
Installierte Executables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
jcat-tool | cli | globales Executable |
Aktualität
Version und Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Seite generiert2026-08-04
Manager-Version0.2.6
Manager aktualisiert
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt
https://github.com/hughsie/libjcat
- InfoNo package-manager update timestamp was available.niedrig Konfidenz
- InfoNo cached GitHub release or tag data was available.https://github.com/hughsie/libjcatnone Konfidenz
Installationsmetadaten
Paketmetadaten
| Paketschlüssel | brew:libjcat |
|---|---|
| Version | 0.2.6 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/libjcat |
| Homepage | https://github.com/hughsie/libjcat |
| Repository | https://github.com/hughsie/libjcat |
| Lizenz | LGPL-2.1-or-later |
| Quellarchiv | https://github.com/hughsie/libjcat/releases/download/0.2.6/libjcat-0.2.6.tar.xz |
| Abhängigkeiten | gettext, glib, gnutls, json-glib |
| Build-Abhängigkeiten | gi-docgen, gobject-introspection, meson, ninja, pkgconf, vala |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
Details aus der Quelldatenbank
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | libjcat |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Andere Paketmanager-Einträge
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
Debian apt95%
gir1.2-jcat-1.0 0.2.3-1
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0- Section: introspection
- Architecture: amd64
- Source Package: libjcat
- 4 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Debian apt95%
jcat 0.2.3-1
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcat- Section: libs
- Architecture: amd64
- Source Package: libjcat
- 3 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Debian apt95%
libjcat-dev 0.2.3-1
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-dev- Section: libdevel
- Architecture: amd64
- Source Package: libjcat
- 6 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Debian apt95%
libjcat-tests 0.2.3-1
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-tests- Section: libs
- Architecture: amd64
- Source Package: libjcat
- 8 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Debian apt95%
libjcat1 0.2.3-1
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1- Section: libs
- Architecture: amd64
- Source Package: libjcat
- 6 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Nix95%
libjcat
nix profile install nixpkgs#libjcat- normalized package name match
- Abgeglichen nach: Libjcat
Ubuntu apt95%
gir1.2-jcat-1.0 0.2.0-2build3
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0- Section: introspection
- Architecture: amd64
- Source Package: libjcat
- 4 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Ubuntu apt95%
jcat 0.2.0-2build3
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcat- Section: universe/libs
- Architecture: amd64
- Source Package: libjcat
- 3 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Ubuntu apt95%
libjcat-dev 0.2.0-2build3
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-dev- Section: universe/libdevel
- Architecture: amd64
- Source Package: libjcat
- 6 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Ubuntu apt95%
libjcat-tests 0.2.0-2build3
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-tests- Section: universe/libs
- Architecture: amd64
- Source Package: libjcat
- 9 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
Ubuntu apt95%
libjcat1 0.2.0-2build3
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1- Section: libs
- Architecture: amd64
- Source Package: libjcat
- 7 Abhängigkeiten
- normalized package name match
- Abgeglichen nach: Libjcat
apk95%
libjcat 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcat- License: LGPL-2.1-or-later
- Architecture: x86_64
- Source Package: libjcat
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Libjcat
apk95%
libjcat-dev 0.2.3-r2
Library for reading and writing Jcat files (development files)
https://github.com/hughsie/libjcat
sudo apk add libjcat-dev- License: LGPL-2.1-or-later
- Architecture: x86_64
- Source Package: libjcat
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Libjcat
apk95%
libjcat-doc 0.2.3-r2
Library for reading and writing Jcat files (documentation)
https://github.com/hughsie/libjcat
sudo apk add libjcat-doc- License: LGPL-2.1-or-later
- Architecture: x86_64
- Source Package: libjcat
- normalized package name match
- Abgeglichen nach: Libjcat
apk95%
libjcat-tools 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcat-tools- License: LGPL-2.1-or-later
- Architecture: x86_64
- Source Package: libjcat
- 1 Abhängigkeiten
- 1 stellt bereit
- normalized package name match
- Abgeglichen nach: Libjcat
dnf95%
libjcat 0.2.6-1.fc45
Library for reading Jcat files
https://github.com/hughsie/libjcat
sudo dnf install libjcat- License: LGPL-2.1-or-later
- Category: Unspecified
- Architecture: i686
- Source Package: libjcat
- 11 Abhängigkeiten
- 2 stellt bereit
- normalized package name match
- Abgeglichen nach: Libjcat
Quellspur
Aus Repository-Daten generiert
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
Combined YAML source
View the package source record on GitHub.
Verwendete Quellen
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation