pkg.sopackage field notes

brew / Rang 10069

stuffbin mit Homebrew installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für stuffbin in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install stuffbin

provider-native install command

Überblick

Paketzusammenfassung

Compress and embed static files and assets into Go binaries

Befehle und Aliase

  • stuffbin

Verlauf

Projektgeschichte und Nutzung

stuffbin is a small Go utility and package for compressing static assets and appending them to Go binaries, then exposing them through a virtual filesystem at runtime.

Projektgeschichte

The official README describes stuffbin as both a command-line utility and Go package for embedding static files into binaries. It says the project was inspired by zgok, with a simpler design and different abstractions.

The README was updated in June 2026 to say the project appears feature complete, with no changes required in roughly three years, while still being used in critical production systems.

Adoptionsgeschichte

The input package facts list stuffbin in Homebrew and Nix, which is consistent with a niche developer tool whose audience is Go application packagers rather than general end users.

Go 1.16 introduced native //go:embed support, and the README positions stuffbin against that built-in feature by emphasizing ZIP compression, dynamic embedding, path aliases, and embedding files outside the package directory.

Wie es verwendet wird

A typical stuffbin workflow builds a Go binary, runs stuffbin to append compressed assets, and then has the application read those assets back from itself through stuffbin's filesystem abstraction.

It is most relevant for distributing single-binary Go services with web assets, templates, or other static files while retaining a local-filesystem fallback during development.

Warum Paket-Nerds sich dafür interessieren

stuffbin matters to package nerds because it sits at the boundary between application packaging and language tooling: it changes what a Go binary can carry without requiring an external asset directory.

Its continued niche after //go:embed is the interesting bit: package maintainers care about compression, dynamic post-build stuffing, and layouts that Go's native embedding deliberately restricts.

Zeitleiste

  • 2021: Go 1.16 introduced //go:embed, later documented by stuffbin as the native feature it compares against.
  • 2026: The official README described stuffbin as feature complete and still used in critical production systems.

Related projects

  • Go's //go:embed is the native alternative discussed by the README.
  • zgok is named by the README as an inspiration for stuffbin.

Sicherheitslage

Risikostufe: blue

broad file, network, media, or database tool signal.

Risikoklassifikator

blue Risiko · mittel Konfidenz · tool

Warum

  • broad file, network, media, or database tool signal

Signale

  • text:compress

Installationsverhalten

  • Es wurden keine Homebrew-Bottle-Metadaten erfasst.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
stuffbinExecutableindexiertes ExecutableAus dem lokalen Executable-Index erkannt.

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-08-03
Manager-Version1.3.0
Manager aktualisiert2026-07-26
lokale Datenunbekannt
Upstreamnicht verfügbar
neueste erkannte Versionnicht erkannt
  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:stuffbin
Version1.3.0
PaketmanagerHomebrew
Homepagehttps://github.com/knadh/stuffbin
Repositoryhttps://github.com/knadh/stuffbin
Zuletzt aktualisiert2026-07-26T04:03:47+02:00
Pulseupdated
Bottlenicht erfasst
Dienstkeiner deklariert

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation