# libjcat mit Homebrew, apk, dnf, Nix, pacman, apt, zypper installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für libjcat in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:libjcat ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install libjcat ``` Evidenz: local Homebrew formula metadata ### Linux - apk (92%): ```sh sudo apk add libjcat ``` Evidenz: Alpine Linux edge package indexes: libjcat from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - dnf (92%): ```sh sudo dnf install libjcat ``` Evidenz: Fedora Rawhide package metadata: libjcat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#libjcat ``` Evidenz: nixpkgs package indexes: pkgs/by-name/li/libjcat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S libjcat ``` Evidenz: Arch Linux sync databases: libjcat from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - Debian apt (92%): ```sh sudo apt install gir1.2-jcat-1.0 ``` Evidenz: Debian stable package indexes: gir1.2-jcat-1.0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - zypper (92%): ```sh sudo zypper install jcat-tool ``` Evidenz: openSUSE Tumbleweed package metadata: jcat-tool from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Paketfakten - **Paketschlüssel:** brew:libjcat - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 0.2.6 - **Quellzusammenfassung:** Library for reading Jcat files - **Homepage:** - **Repository:** - **Lizenz:** LGPL-2.1-or-later - **Quellarchiv:** - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - jcat-tool (cli) - jcat-tool (Alias) ## Abhängigkeiten - gettext - glib - gnutls - json-glib ## Build-Abhängigkeiten - gi-docgen - gobject-introspection - meson - ninja - pkgconf - vala ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 0.2.6 - lokale Daten: OK - Upstream-Repository: https://github.com/hughsie/libjcat - Info: No package-manager update timestamp was available. - Info: No cached GitHub release or tag data was available. ## Projektgeschichte und Nutzung libjcat is a small GObject-oriented library and command-line tool for reading and writing gzip-compressed JSON catalog files. Its niche is software-integrity metadata: a Jcat file can collect checksums and detached signatures for the files in an archive, with support for SHA checksums, GPG signatures, and PKCS#7 signatures. ### Projektgeschichte Richard Hughes published libjcat as a standalone project in 2020, splitting a catalog-signature concern that matters to firmware distribution into a reusable library. The README describes the format as equivalent in purpose to Microsoft Windows catalog files, but represented as gzipped JSON divided into JcatFile, JcatItem, and JcatBlob objects. The project grew around firmware-update workflows. Its examples show firmware payloads and metainfo XML carried as catalog items, then signed or verified with local self-signing keys, explicit public keys, or imported detached signatures. ### Adoptionsgeschichte libjcat matters mostly because of fwupd and the Linux Vendor Firmware Service ecosystem. fwupd documentation explains that LVFS adds a .jcat file to uploaded firmware archives so original firmware and metadata are not modified while checksums and detached signatures remain verifiable. Homebrew, Debian, Fedora, Arch, Nix, Alpine, Ubuntu, and openSUSE package it, which reflects its role as a small shared dependency for firmware and software-integrity tooling rather than as an end-user application. ### Wie es verwendet wird Users usually meet libjcat through jcat-tool, which can create a catalog, add checksums, sign payloads, import detached signatures, export signature blobs, and verify a catalog against a public certificate. Version 2.0.0 added support for signing the checksum of a large payload instead of loading the whole payload for signature verification. ### Warum Paket-Nerds sich dafür interessieren For package maintainers, libjcat is interesting because it packages a Windows-like catalog-signature idea in a Unix-friendly library with introspection bindings and a tiny CLI. It is one of those dependencies that looks obscure until a firmware update path needs detached integrity metadata that survives archive repacking. ### Zeitleiste - 2020-03-23: libjcat 0.1.0 release commit. - 2020: README examples document firmware.bin and firmware.metainfo.xml as typical Jcat archive items. - 2022-03-22: libjcat 0.1.11 release commit. - 2023-12-15: README examples document signing the checksum target for large payloads, noting the feature requires JCat 2.0.0 or newer. ### Related projects - fwupd and LVFS are the most visible related projects because they use Jcat files for firmware metadata and payload signature handling. GnuTLS certtool, GPG, PKCS#7, and AppStream-style firmware metadata sit around the same workflow. ### Quellen - - - - ## Sicherheitshinweise library-like package without higher-risk signals. - **Geiger-Risiko:** grün / niedrig - library-like package without higher-risk signals ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** libjcat - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Debian apt - gir1.2-jcat-1.0 - 0.2.3-1: normalized package name match | Debian stable package indexes: gir1.2-jcat-1.0 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | GObject introspection data for libjcat | https://github.com/hughsie/libjcat - Debian apt - jcat - 0.2.3-1: normalized package name match | Debian stable package indexes: jcat from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | JSON catalog library tool | https://github.com/hughsie/libjcat - Debian apt - libjcat-dev - 0.2.3-1: normalized package name match | Debian stable package indexes: libjcat-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files for libjcat | https://github.com/hughsie/libjcat - Debian apt - libjcat-tests - 0.2.3-1: normalized package name match | Debian stable package indexes: libjcat-tests from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | Installed tests for libjcat1 | https://github.com/hughsie/libjcat - Debian apt - libjcat1 - 0.2.3-1: normalized package name match | Debian stable package indexes: libjcat1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | JSON catalog library | https://github.com/hughsie/libjcat - Nix - libjcat: normalized package name match | nixpkgs package indexes: pkgs/by-name/li/libjcat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - gir1.2-jcat-1.0 - 0.2.0-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: gir1.2-jcat-1.0 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | GObject introspection data for libjcat | https://github.com/hughsie/libjcat - Ubuntu apt - jcat - 0.2.0-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: jcat from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | JSON catalog library tool | https://github.com/hughsie/libjcat - Ubuntu apt - libjcat-dev - 0.2.0-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: libjcat-dev from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | development files for libjcat | https://github.com/hughsie/libjcat - Ubuntu apt - libjcat-tests - 0.2.0-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: libjcat-tests from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | Installed tests for libjcat1 | https://github.com/hughsie/libjcat - Ubuntu apt - libjcat1 - 0.2.0-2build3: normalized package name match | Ubuntu 24.04 LTS package indexes: libjcat1 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | JSON catalog library | https://github.com/hughsie/libjcat - apk - libjcat - 0.2.3-r2: normalized package name match | Alpine Linux edge package indexes: libjcat from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library for reading and writing Jcat files | https://github.com/hughsie/libjcat - apk - libjcat-dev - 0.2.3-r2: normalized package name match | Alpine Linux edge package indexes: libjcat-dev from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library for reading and writing Jcat files (development files) | https://github.com/hughsie/libjcat - apk - libjcat-doc - 0.2.3-r2: normalized package name match | Alpine Linux edge package indexes: libjcat-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library for reading and writing Jcat files (documentation) | https://github.com/hughsie/libjcat - apk - libjcat-tools - 0.2.3-r2: normalized package name match | Alpine Linux edge package indexes: libjcat-tools from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz | Library for reading and writing Jcat files | https://github.com/hughsie/libjcat - dnf - libjcat - 0.2.6-1.fc45: normalized package name match | Fedora Rawhide package metadata: libjcat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst | Library for reading Jcat files | https://github.com/hughsie/libjcat ## Verwandte Links - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://pkg.so/de/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Networking and protocol packages](https://pkg.so/de/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [glib](https://pkg.so/de/brew/glib/) - Runtime dependency declared by Homebrew. - [gettext](https://pkg.so/de/brew/gettext/) - Runtime dependency declared by Homebrew. - [gnutls](https://pkg.so/de/brew/gnutls/) - Runtime dependency declared by Homebrew. - [json-glib](https://pkg.so/de/brew/json-glib/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/de/brew/pkgconf/) - Build dependency declared by Homebrew. - [ninja](https://pkg.so/de/brew/ninja/) - Build dependency declared by Homebrew. - [meson](https://pkg.so/de/brew/meson/) - Build dependency declared by Homebrew. - [gobject-introspection](https://pkg.so/de/brew/gobject-introspection/) - Build dependency declared by Homebrew. - [fwupd](https://pkg.so/de/brew/fwupd/) - Popular package that depends on this formula. - [pinentry-mac](https://pkg.so/de/brew/pinentry-mac/) - Shares pkgdb curated category or tags: cli, gpg, security. - [md5sha1sum](https://pkg.so/de/brew/md5sha1sum/) - Shares pkgdb curated category or tags: checksums, cli, security. - [pass](https://pkg.so/de/brew/pass/) - Shares pkgdb curated category or tags: cli, gpg, security. - [git-secret](https://pkg.so/de/brew/git-secret/) - Shares pkgdb curated category or tags: cli, gpg, security. - [gopass](https://pkg.so/de/brew/gopass/) - Shares pkgdb curated category or tags: cli, gpg, security. - [md5deep](https://pkg.so/de/brew/md5deep/) - Shares pkgdb curated category or tags: checksums, cli, security. - [rhash](https://pkg.so/de/brew/rhash/) - Shares pkgdb curated category or tags: checksums, cli, security. - [sha2](https://pkg.so/de/brew/sha2/) - Shares pkgdb curated category or tags: cli, security, sha256. - [swtpm](https://pkg.so/de/brew/swtpm/) - Both packages work with overlapping file formats or content types. Shared terms: cli, gettext, glib, json, json-glib. - [blackbox](https://pkg.so/de/brew/blackbox/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, files, gpg, security. ## Combined YAML source View the package source record on GitHub. [combined/libjcat.yml](https://github.com/mxcl/pkgdb/blob/main/combined/libjcat.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph