pkg.sopackage field notes

brew / Rang 1233

cargo-binstall mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für cargo-binstall in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install cargo-binstall

provider-native install command

Überblick

Paketzusammenfassung

Binary installation for rust projects

Befehle und Aliase

  • cargo-binstall

Verlauf

Projektgeschichte und Nutzung

cargo-binstall is a Cargo subcommand for installing Rust command-line tools from prebuilt binaries when possible, falling back to source builds when needed. Its package-history importance is that it tackles the pain of `cargo install` compile times without requiring every Rust tool author to become a full package maintainer.

Projektgeschichte

The public cargo-binstall repository was created in December 2020. The README describes Binstall as a low-complexity alternative to building from source with `cargo install` or manually downloading release archives.

The project evolved around reuse of existing ecosystem metadata: it fetches crate information from crates.io, checks the linked repository for matching releases and artifacts, can fall back to quickinstall artifacts, supports alternate targets, and uses `cargo install` as a last resort.

Adoptionsgeschichte

cargo-binstall is packaged through Homebrew, Nix, Arch Linux, and Scoop according to the supplied source facts, and its README documents Homebrew installation plus official shell one-liners and a first-party GitHub Action.

Adoption is also indirect: the README notes that cargo-update can automatically use Binstall if present, and that taiki-e/install-action has dedicated support for selected tools while using Binstall for others.

Wie es verwendet wird

Users typically run `cargo binstall <crate>` to install a binary crate from a matching release artifact. For CI, the README recommends `--no-confirm`, and for maintainers it documents optional `[package.metadata.binstall]` configuration in Cargo.toml.

The SUPPORT.md documentation explains how maintainers can specify package URLs, archive formats, binary directories, disabled strategies, target overrides, and cfg expressions so Binstall can find release artifacts reliably.

Warum Paket-Nerds sich dafür interessieren

cargo-binstall is significant because Rust's source-first install story is elegant but expensive. For command-line tools, users often want the package-manager experience of downloading a binary, while maintainers may already publish GitHub release artifacts.

For package nerds it occupies the space between language registries and system package managers: it reads crates.io metadata and Cargo.toml hints, locates release assets, respects targets and signatures where available, and only compiles when the binary path fails.

Zeitleiste

  • 2020: cargo-binstall repository created on GitHub.
  • 2026: GitHub repository metadata shows active maintenance and a large user signal for a Cargo installer tool.
  • 2026: README documents release-asset installation, quickinstall fallback, a first-party GitHub Action, signatures, and telemetry controls.

Related projects

  • cargo-binstall is related to cargo install, crates.io, GitHub/GitLab release assets, cargo-quickinstall, and cargo-update.
  • The README also names cargo-run-bin for project-scoped tool management, taiki-e/install-action for CI installation, and support metadata in Cargo.toml for maintainers who publish binaries.

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • Es wurden keine Homebrew-Bottle-Metadaten erfasst.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
cargo-binstallExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03
Manager-Version1.21.1
Manager aktualisiert2026-07-25
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:cargo-binstall
Version1.21.1
PaketmanagerHomebrew
Homepagehttps://github.com/cargo-bins/cargo-binstall
Repositoryhttps://github.com/cargo-bins/cargo-binstall
Zuletzt aktualisiert2026-07-25T14:57:32Z
Pulseupdated
Bottlenicht erfasst
Dienstkeiner deklariert

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation