brew / Rang 5989

cargo-about mit Homebrew, Nix, pacman installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für cargo-about in AI-Agent-Workflows.

Installationsbefehl Sicherheitshinweise

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%

brew install cargo-about

local Homebrew formula metadata

Linux

Nixverifiziert · 92%

nix profile install nixpkgs#cargo-about

nixpkgs package indexes · pkgs/by-name/ca/cargo-about/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%

sudo pacman -S cargo-about

Arch Linux sync databases · cargo-about · Quelle: geo.mirror.pkgbuild.com

Überblick

Paketzusammenfassung

Cargo plugin to generate list of all licenses for a crate

Projektlinks

Homepage

Befehle und Aliase

cargo-about

Verlauf

Projektgeschichte und Nutzung

cargo-about is an Embark Studios Cargo plugin for generating license listings for the full dependency graph of a Rust crate. It sits at the intersection of Cargo metadata, SPDX license data, and release compliance work.

Projektgeschichte

Embark Studios created the public cargo-about repository in November 2019 and released it as one of its open-source Rust tools. The README states that Embark uses and likes the tool internally, while warning that it is not legal advice.

The project provides both a command-line Cargo subcommand and an mdBook manual. Its normal workflow is to initialize an about.toml and template, then generate a license output such as an HTML notice file from dependency metadata.

Adoptionsgeschichte

cargo-about's adoption follows Rust projects that need repeatable license disclosure for dependency-heavy applications. The supplied package-manager facts list Homebrew, Nix, and Arch Linux packages, and the upstream README documents installation from crates.io and Arch Linux.

The project also benefited from Embark's wider open-source Rust toolchain presence. Its repository topics include SPDX, license-checking, Cargo plugin, and Rust, which describe the niche it occupies among Cargo subcommands.

Wie es verwendet wird

The documented starting workflow is `cargo about init`, which creates about.toml and about.hbs in a Cargo project, followed by `cargo about generate about.hbs` to produce license information.

The official book documents commands and configuration for generating, clarifying, and working around license metadata issues, making cargo-about more of a compliance-report generator than a general dependency-audit scanner.

Warum Paket-Nerds sich dafür interessieren

cargo-about matters because open-source license obligations are one of the least glamorous but most important parts of shipping packaged software. Rust's transitive dependency graphs can be large, and cargo-about turns that graph into a reproducible artifact for release notes, installers, game bundles, and product distributions.

For package nerds, its importance is also cultural: it is a Cargo subcommand that treats package metadata as operational data, using Cargo manifests and SPDX license identifiers to make dependency compliance automatable.

Zeitleiste

2019: cargo-about repository created on GitHub.
2019: GitHub releases show an initial 0.0.1 release in November.
2026: Repository metadata shows continued maintenance, Rust implementation, and licensing/SPDX topics.

Related projects

cargo-about is related to Cargo itself, SPDX license data, crates.io package metadata, and docs.rs API documentation.
It overlaps culturally with cargo-deny and cargo-audit: all three turn Cargo dependency metadata into release or security decisions, but cargo-about focuses on license listings rather than vulnerability or policy enforcement.

Quellen

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

narrow executable package without higher-risk signals

Signale

metadata:no-higher-risk-signals

Installationsverhalten

Es wurden keine Homebrew-Bottle-Metadaten erfasst.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: <manifest_root>/about.toml

Executables

Installierte Executables

Befehl	Art	Sichtbarkeit	Hinweis
`cargo-about`	Executable	indexiertes Executable	Aus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03

Manager-Version0.9.1

Manager aktualisiert2026-06-30

lokale Datenunbekannt

Upstreamnicht verfügbar

neueste erkannte Versionnicht erkannt

OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüssel	brew:cargo-about
Version	0.9.1
Paketmanager	Homebrew
Homepage	https://github.com/EmbarkStudios/cargo-about
Repository	https://github.com/EmbarkStudios/cargo-about
Zuletzt aktualisiert	2026-06-30T12:38:26Z
Pulse	updated
Bottle	nicht erfasst
Dienst	keiner deklariert

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

cargo-about

nix profile install nixpkgs#cargo-about

normalized package name match
Abgeglichen nach: Cargo About

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/ca/cargo-about/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

pacman95%

cargo-about 0.8.4-2