# curl mit Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für curl in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:curl ``` ## Antwort zur Agent-Sicherheit curl can fetch remote scripts, call APIs, and exfiltrate data from files an agent can read. - **Credential-Zugriff:** Reads netrc files, headers, cookies, tokens, and files used as request bodies. - **Änderungen an Remote-Zustand:** Can call arbitrary HTTP APIs that mutate remote systems. - **Publish-/Artefakt-Risiko:** Can upload artifacts or run installer pipelines when paired with a shell. - **Empfohlene Kontrolle:** Gate credentialed requests, file uploads, and pipe-to-shell installer patterns. - **Hinweise für Agent-Nutzung:** Allow simple public fetches; require approval for authenticated requests, uploads, and shell execution. Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install curl ``` Evidenz: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install curl ``` Evidenz: MacPorts ports tree: net/curl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add curl ``` Evidenz: Alpine Linux edge package indexes: curl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install curl ``` Evidenz: Debian stable package indexes: curl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install curl ``` Evidenz: Fedora Rawhide package metadata: curl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#curl ``` Evidenz: nixpkgs package indexes: curl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S curl ``` Evidenz: Arch Linux sync databases: curl from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install curl ``` Evidenz: openSUSE Tumbleweed package metadata: curl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install curl ``` Evidenz: Chocolatey community package catalog: curl from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','crystaldiskinfo' - Scoop (92%): ```sh scoop install main/curl ``` Evidenz: Scoop official bucket manifest trees: bucket/curl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id cURL.cURL -e ``` Evidenz: Windows Package Manager source index: cURL.cURL from https://cdn.winget.microsoft.com/cache/source.msix ## Paketfakten - **Paketschlüssel:** brew:curl - **Paketmanager:** Homebrew - **Version:** 8.21.0 - **Quellzusammenfassung:** Get a file from an HTTP, HTTPS or FTP server - **Homepage:** - **Repository:** - **Zuletzt aktualisiert:** 2026-06-27T15:50:29Z - **Generiert:** 2026-08-03T19:37:03+00:00 ## Executables - curl (Alias) - curl-config (Alias) - wcurl (Alias) ## Installationsverhalten - Bottle: nicht verfügbar ## Version und Aktualität - Seite generiert: 2026-08-03 - Manager-Version: 8.21.0 ## Projektgeschichte und Nutzung curl is a command-line transfer tool and libcurl is its underlying URL transfer library. Together they became one of the default pieces of Internet plumbing in Unix-like systems, Windows, language runtimes, build systems, containers, and scripts. ### Projektgeschichte curl traces back to late 1996, when Daniel Stenberg extended Rafael Sagula's HttpGet utility while building an IRC bot feature for currency exchange lookups. The project moved from HttpGet to urlget as protocols beyond HTTP were added, then became curl in March 1998 after upload support made the older name misleading. ### Adoptionsgeschichte The project history records early Linux RPM packaging in 1998, the first Debian package in 1999, a non-beta libcurl interface in 2000, PHP adopting libcurl the same year, and Mac OS X bundling curl in 2001. By 2018, curl's history page described it as shipped in Windows 10 and estimated curl and libcurl at five billion installed instances; by 2020 that estimate reached ten billion instances. ### Wie es verwendet wird curl is used interactively and in scripts to transfer data over URL-addressed protocols, especially HTTP(S), FTP(S), SMTP, IMAP, SFTP, WebSocket, and related network protocols. libcurl is embedded by applications that need the same transfer features through a stable C API. ### Warum Paket-Nerds sich dafür interessieren curl matters to package managers because it is often both a package and a bootstrap tool: build scripts fetch with it, test suites depend on it, and other packages link against libcurl. Packaging has to track TLS backends, protocol feature flags, CA certificate behavior, ABI stability, and the split between the curl executable, libcurl, headers, and curl-config. ### Zeitleiste - 1996: HttpGet 0.1 released; Daniel Stenberg soon becomes maintainer. - 1998: curl 4 released under the curl name. - 1999: First Debian package recorded in upstream history. - 2000: libcurl non-beta interface arrives and PHP adopts libcurl. - 2001: curl bundled in Mac OS X 10.1. - 2010: Project switches from CVS to git hosted by GitHub. - 2018: Windows 10 starts shipping curl. - 2020: Upstream estimates 10 billion curl and libcurl installations worldwide. - 2024: wcurl adopted into the curl organization. ### Related projects - libcurl, wcurl, trurl, HTTPie, Curlie, and cURLpp are adjacent projects in the curl ecosystem. ### Quellen - - - - ## Sicherheitshinweise doc example: network transfer tool. - **Geiger-Risiko:** blue / hoch - doc example: network transfer tool ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.curlrc ## Credential files - Unix: ~/.netrc, ~/.curlrc ## Andere Paketmanager-Einträge - Debian apt - curl - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: curl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | command line tool for transferring data with URL syntax | https://curl.se/ - Debian apt - libcurl3t64-gnutls - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl3t64-gnutls from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | easy-to-use client-side URL transfer library (GnuTLS flavour) | https://curl.se/ - Debian apt - libcurl4-doc - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | documentation for libcurl | https://curl.se/ - Debian apt - libcurl4-gnutls-dev - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-gnutls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files and documentation for libcurl (GnuTLS flavour) | https://curl.se/ - Debian apt - libcurl4-openssl-dev - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-openssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files and documentation for libcurl (OpenSSL flavour) | https://curl.se/ - Debian apt - libcurl4t64 - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | easy-to-use client-side URL transfer library (OpenSSL flavour) | https://curl.se/ - Nix - curl: normalized package name match | nixpkgs package indexes: curl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - curl - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: curl from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | command line tool for transferring data with URL syntax | https://curl.se/ - Ubuntu apt - libcurl3t64-gnutls - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl3t64-gnutls from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | easy-to-use client-side URL transfer library (GnuTLS flavour) | https://curl.se/ - Ubuntu apt - libcurl4-doc - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-doc from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | documentation for libcurl | https://curl.se/ - Ubuntu apt - libcurl4-gnutls-dev - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-gnutls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development files and documentation for libcurl (GnuTLS flavour) | https://curl.se/ - Ubuntu apt - libcurl4-openssl-dev - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-openssl-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development files and documentation for libcurl (OpenSSL flavour) | https://curl.se/ - Ubuntu apt - libcurl4t64 - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | easy-to-use client-side URL transfer library (OpenSSL flavour) | https://curl.se/ - apk - curl - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library | https://curl.se/ - apk - curl-dbg - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library (debug symbols) | https://curl.se/ - apk - curl-dev - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library (development files) | https://curl.se/ ## Combined YAML source View the package source record on GitHub. [combined/curl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/curl.yml) ## Quellen - pkg.so package database - Geiger risk classifier - curated configuration and credential file locations - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer