macOS
brew install --cask fossalocal Homebrew cask metadata
cask / Rang 1915
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für fossa in AI-Agent-Workflows.
Installation
brew install --cask fossalocal Homebrew cask metadata
Überblick
Zero-configuration polyglot dependency analysis tool
Verlauf
FOSSA CLI is the command-line client for FOSSA's dependency analysis, license compliance, security scanning, attribution, and SBOM-oriented workflows. It is packaged as the `fossa` executable and distributed for local developer use and CI automation.
The public `fossas/fossa-cli` repository was created in 2018. The README describes the tool as zero-configuration, polyglot dependency analysis that detects dependencies in a codebase or build and uploads analysis results to the FOSSA web application.
The repository documentation grew into a user manual covering integration walkthroughs, analysis targets, vendored dependencies, manual dependencies, container scanning, SBOM analysis, debugging, and command references.
The README documents installation by shell script, PowerShell, GitHub Releases, Scoop, and a Homebrew cask, with the cask updated automatically. It also displays a downloads badge in the millions, indicating broad binary distribution through GitHub Releases.
A typical workflow is to install `fossa`, set `FOSSA_API_KEY`, run `fossa analyze` in a project directory, review results in the FOSSA web application, and optionally gate CI with `fossa test` or integrate with GitHub status checks.
FOSSA CLI is representative of compliance tooling becoming a package-manager-aware developer tool. Its value comes from recognizing many language ecosystems and build tools, combining static and dynamic dependency strategies, and turning local package metadata into organization-level license and vulnerability reports.
Sicherheitslage
Für fossa wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
.fossa.ymlExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
fossa | Binärdatei | Homebrew-Cask-Binärdatei | fossa |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
Installationsmetadaten
| Paketschlüssel | cask:fossa |
|---|---|
| Version | 3.17.15 |
| Paketmanager | Homebrew Cask |
| Homepage | https://fossa.com/ |
| Zuletzt aktualisiert | 2026-07-27T19:19:48Z |
| Pulse | updated |
| SHA-256 | 2042f6b5f7b93e28948c4ebcbb76b240379fdab467640d4842d3de50ea0f47c3 |
| Download-URL | https://github.com/fossas/fossa-cli/releases/download/v3.17.15/fossa_3.17.15_darwin_arm64.zip |
| Bottle | nicht erfasst |
| Dienst | keiner deklariert |
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
main/fossa
scoop install main/fossaFOSSA.FOSSA-cli
winget install --id FOSSA.FOSSA-cli -eQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.