pkg.soopen package index

brew / Rang 6525

ubi mit Homebrew, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für ubi in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install ubi

local Homebrew formula metadata

Windows

Windows Package Managerverifiziert · 92%
winget install --id houseabsolute.ubi -e

Windows Package Manager source index · houseabsolute.ubi · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Universal Binary Installer

Befehle und Aliase

  • ubi

Verlauf

Projektgeschichte und Nutzung

ubi, the Universal Binary Installer, is a small CLI for installing prebuilt binaries from GitHub releases and similar release pages. It belongs to the newer generation of package-helper tools that automate the common shell-script pattern of selecting the right OS and CPU asset, downloading it, and putting the binary on PATH.

Projektgeschichte

The official repository describes ubi as the Universal Binary Installer. Its release page shows a 0.x project with signed tags, many platform-specific release assets, and continuing changes around asset selection, platform matching, Android support, libc matching, private-repository downloads, and supply-chain safety.

The project is maintained by Dave Rolsky under the houseabsolute namespace and is distributed under Apache-2.0 OR MIT in the batch input. Its own releases are themselves a demonstration of the problem it solves: the v0.9.0 release publishes many per-platform archives and checksum assets.

Adoptionsgeschichte

ubi is adopted in package-nerd workflows where users want a lightweight installer for GitHub-release binaries without writing a custom curl, tar, and grep script for each tool. The batch input lists Homebrew and winget availability, reflecting its cross-platform installer niche.

Release notes show the project responding to real packaging edge cases: asset names that contain misleading numbers, Android targets, musl versus glibc Linux assets, private repositories, and minimum release age to reduce supply-chain risk.

Wie es verwendet wird

ubi is used to pick a matching release artifact for the current platform, download it, and install the contained binary. Its package-nerd use case is bootstrapping CLI tools from upstream release assets when a native package does not exist or when the user wants upstream's current binary.

The v0.9.0 release added a --min-age-days flag to consider only releases at least a specified age, explicitly framed by the project as useful for mitigating supply-chain attacks.

Warum Paket-Nerds sich dafür interessieren

ubi matters because GitHub Releases became an unofficial binary distribution layer for many small CLIs. A generic installer for those releases sits between full package managers and one-off install scripts.

For Homebrew users, the amusing recursion is that a package manager can install ubi, and ubi can then install tools that are not packaged or are wanted directly from upstream release artifacts.

Zeitleiste

  • 2024-2026: The visible release history is in the 0.x series, with repeated changes around release-asset matching and platform support.
  • 2026: v0.9.0 is released with --min-age-days for release-age filtering.

Related projects

  • GitHub Releases are the primary ecosystem surface for ubi's installer model.
  • Homebrew and winget provide native package-manager distribution for ubi itself according to the batch input.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.
  • Build-Metadaten listen 2 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
ubicliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-04
Manager-Version0.10.0
Manager aktualisiert2026-07-26
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv0.10.0

https://github.com/houseabsolute/ubi

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:ubi
Version0.10.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/ubi
Homepagehttps://github.com/houseabsolute/ubi
Repositoryhttps://github.com/houseabsolute/ubi
LizenzApache-2.0 OR MIT
Quellarchivhttps://github.com/houseabsolute/ubi/archive/refs/tags/v0.10.0.tar.gz
Zuletzt aktualisiert2026-07-26T21:15:45Z
Pulseupdated
Abhängigkeitenxz
Build-Abhängigkeitenpkgconf, rust
Von macOS bereitgestellte Bibliothekenbzip2
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameubi
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

winget95%

houseabsolute.ubi

winget install --id houseabsolute.ubi -e
  • normalized package name match
  • Abgeglichen nach: Ubi
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: houseabsolute.ubi from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation