pkg.soopen package index

brew / Rang 9656

signify-osx mit Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für signify-osx in AI-Agent-Workflows.

InstallationsbefehlSicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install signify-osx

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install signify

MacPorts ports tree · security/signify/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add signify

Alpine Linux edge package indexes · signify · Quelle: dl-cdn.alpinelinux.org

Debian aptverifiziert · 92%
sudo apt install signify

Debian stable package indexes · signify · Quelle: deb.debian.org

Fedora dnfverifiziert · 92%
sudo dnf install signify

Fedora Rawhide package metadata · signify · Quelle: dl.fedoraproject.org

Nixverifiziert · 92%
nix profile install nixpkgs#signify

nixpkgs package indexes · pkgs/by-name/si/signify/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S signify

Arch Linux sync databases · signify · Quelle: geo.mirror.pkgbuild.com

openSUSE zypperverifiziert · 92%
sudo zypper install signify

openSUSE Tumbleweed package metadata · signify · Quelle: download.opensuse.org

Überblick

Paketzusammenfassung

Cryptographically sign and verify files

Befehle und Aliase

  • signify

Verlauf

Projektgeschichte und Nutzung

signify-osx is a small, audit-oriented macOS port of OpenBSD's signify file-signing utility.

Projektgeschichte

signify-osx ports OpenBSD's signify(1) utility to macOS. The maintainer states that it tracks upstream OpenBSD sources directly and minimizes portability changes to preserve auditability.

Adoptionsgeschichte

The port is available through Homebrew and MacPorts. Comparable signify implementations are also packaged across several Unix-like operating systems, reflecting the utility's role in lightweight package and artifact verification.

Wie es verwendet wird

Users generate or supply signify key pairs, sign files with a secret key, and verify signatures with a public key. Package-oriented use centers on authenticating release manifests and downloaded artifacts.

Warum Paket-Nerds sich dafür interessieren

signify is closely associated with OpenBSD's minimalist approach to signed releases and packages. The macOS port deliberately keeps its portability layer small so users can compare and audit it against upstream OpenBSD sources.

Zeitleiste

  • 2014: OpenBSD introduced signify for signing and verifying releases.
  • 2015: signify-osx began providing the utility to OS X users.
  • 2019: The port documented testing through macOS 10.14 and continued direct tracking of OpenBSD sources.

Related projects

  • OpenBSD signify(1) is the authoritative upstream utility.
  • The portable `signify` implementations packaged by other operating systems serve the same signing and verification format.

Quellen

  • Authoritative OpenBSD manual: https://man.openbsd.org/signify.1
  • Official signify-osx repository and README: https://github.com/jpouellet/signify-osx

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 11 Plattformziele verfügbar.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
signifycliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-11-04
Manager-Version1.4
Manager aktualisiert2026-09-13
lokale DatenOK
Upstreamaktuell
neueste erkannte Version1.4

https://github.com/jpouellet/signify-osx

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:signify-osx
Version1.4
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/signify-osx
Homepagehttps://man.openbsd.org/signify.1
Repositoryhttps://github.com/jpouellet/signify-osx
Upstream-Dokumentationhttps://man.openbsd.org/signify.1
LizenzISC
Quellarchivhttps://github.com/jpouellet/signify-osx/archive/refs/tags/1.4.tar.gz
Zuletzt aktualisiert2026-09-13T02:25:45Z
Pulseupdated
Bottleverfügbar (auf arm64_big_sur, arm64_golden_gate, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, monterey, sonoma, ventura)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namesignify-osx
Version Scheme0
Revision0
Head VersionHEAD
Requirements
  • macos
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

MacPorts94%

signify

sudo port install signify
  • installed executable or alias match
  • Abgeglichen nach: Signify
MacPorts ports tree · api.github.com · MacPorts ports tree: security/signify/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Debian apt92%

signify 1.14-7

Automatic, semi-random ".signature" rotator/generator

http://signify.sf.net

sudo apt install signify
  • Section: mail
  • Architecture: all
  • 1 Abhängigkeiten
  • installed executable or alias match
  • Abgeglichen nach: Signify
Debian stable package indexes · deb.debian.org · Debian stable package indexes: signify from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz
Nix92%

signify

nix profile install nixpkgs#signify
  • installed executable or alias match
  • Abgeglichen nach: Signify
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/si/signify/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
Ubuntu apt92%

signify 1.14-7

Automatic, semi-random ".signature" rotator/generator

http://signify.sf.net

sudo apt install signify
  • Section: universe/mail
  • Architecture: all
  • 1 Abhängigkeiten
  • installed executable or alias match
  • Abgeglichen nach: Signify
Ubuntu 24.04 LTS package indexes · archive.ubuntu.com · Ubuntu 24.04 LTS package indexes: signify from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz
apk92%

signify 32-r1

OpenBSD tool to sign and verify signatures on files

https://github.com/aperezdc/signify

sudo apk add signify
  • License: ISC
  • Architecture: x86_64
  • Source Package: signify
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • installed executable or alias match
  • Abgeglichen nach: Signify
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: signify from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
apk92%

signify-doc 32-r1

OpenBSD tool to sign and verify signatures on files (documentation)

https://github.com/aperezdc/signify

sudo apk add signify-doc
  • License: ISC
  • Architecture: x86_64
  • Source Package: signify
  • installed executable or alias match
  • Abgeglichen nach: Signify
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: signify-doc from https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz
dnf92%

signify 33-2.fc45

Sign and verify signatures on files

https://codeberg.org/aperezdc/signify

sudo dnf install signify
  • License: ISC AND Beerware AND BSD-3-Clause AND MIT AND LicenseRef-Fedora-Public-Domain
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: signify
  • 3 Abhängigkeiten
  • 1 stellt bereit
  • installed executable or alias match
  • Abgeglichen nach: Signify
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: signify from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/652278618dec9c023176a80c435a32a2c8154869fb0eb662c267a54df28d77d9-primary.xml.zst
pacman92%

signify 33-1

OpenBSD tool to cryptographically sign and verify files

https://codeberg.org/aperezdc/signify

sudo pacman -S signify
  • License: BSD
  • Architecture: x86_64
  • 2 Abhängigkeiten
  • installed executable or alias match
  • Abgeglichen nach: Signify
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: signify from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
zypper92%

signify 33-1.3

OpenBSD tool to sign and verify signatures on files (portable version)

https://codeberg.org/aperezdc/signify

sudo zypper install signify
  • License: BSD-3-Clause
  • Category: Productivity/Networking/Security
  • Architecture: x86_64
  • Source Package: signify
  • 2 Abhängigkeiten
  • 1 stellt bereit
  • installed executable or alias match
  • Abgeglichen nach: Signify
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: signify from https://download.opensuse.org/tumbleweed/repo/oss/repodata/d310d5a96106e1e8872a385adf98aaa23be9db5d80937a6717314e7e7f37715065c6c748ab7ccee6475d620b46979c0fe64235fc0c46988e17edf659578fcf31-primary.xml.zst

Paketgraph

Links stammen aus dem lokalen Paketbeziehungsgraph, Ergänzungen, Abhängigkeitskanten, Ecosystem-Matches und Paket-Hub-Mitgliedschaft.

Gleicher Workflow

  • nettleShares pkgdb curated category or tags: cli, cryptography, security.
  • nssShares pkgdb curated category or tags: cli, cryptography, security.
  • mbedtlsShares pkgdb curated category or tags: cli, cryptography, security.
  • argon2Shares pkgdb curated category or tags: cli, cryptography, security.
  • opensshShares pkgdb curated category or tags: cli, cryptography, security.
  • libxmlsec1Shares pkgdb curated category or tags: cli, cryptography, security.

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation