macOS
brew install libjcatlocal Homebrew formula metadata
brew / rang 4343
Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de libjcat pour les workflows d'agents IA.
installation
brew install libjcatlocal Homebrew formula metadata
sudo apk add libjcatAlpine Linux edge package indexes · libjcat · Source: dl-cdn.alpinelinux.org
sudo dnf install libjcatFedora Rawhide package metadata · libjcat · Source: dl.fedoraproject.org
nix profile install nixpkgs#libjcatnixpkgs package indexes · pkgs/by-name/li/libjcat/package.nix · Source: api.github.com
sudo pacman -S libjcatArch Linux sync databases · libjcat · Source: geo.mirror.pkgbuild.com
sudo apt install gir1.2-jcat-1.0Debian stable package indexes · gir1.2-jcat-1.0 · Source: deb.debian.org
sudo zypper install jcat-toolopenSUSE Tumbleweed package metadata · jcat-tool · Source: download.opensuse.org
aperçu
Library for reading Jcat files
historique
libjcat is a small GObject-oriented library and command-line tool for reading and writing gzip-compressed JSON catalog files. Its niche is software-integrity metadata: a Jcat file can collect checksums and detached signatures for the files in an archive, with support for SHA checksums, GPG signatures, and PKCS#7 signatures.
Richard Hughes published libjcat as a standalone project in 2020, splitting a catalog-signature concern that matters to firmware distribution into a reusable library. The README describes the format as equivalent in purpose to Microsoft Windows catalog files, but represented as gzipped JSON divided into JcatFile, JcatItem, and JcatBlob objects.
The project grew around firmware-update workflows. Its examples show firmware payloads and metainfo XML carried as catalog items, then signed or verified with local self-signing keys, explicit public keys, or imported detached signatures.
libjcat matters mostly because of fwupd and the Linux Vendor Firmware Service ecosystem. fwupd documentation explains that LVFS adds a .jcat file to uploaded firmware archives so original firmware and metadata are not modified while checksums and detached signatures remain verifiable.
Homebrew, Debian, Fedora, Arch, Nix, Alpine, Ubuntu, and openSUSE package it, which reflects its role as a small shared dependency for firmware and software-integrity tooling rather than as an end-user application.
Users usually meet libjcat through jcat-tool, which can create a catalog, add checksums, sign payloads, import detached signatures, export signature blobs, and verify a catalog against a public certificate. Version 2.0.0 added support for signing the checksum of a large payload instead of loading the whole payload for signature verification.
For package maintainers, libjcat is interesting because it packages a Windows-like catalog-signature idea in a Unix-friendly library with introspection bindings and a tiny CLI. It is one of those dependencies that looks obscure until a firmware update path needs detached integrity metadata that survives archive repacking.
posture de sécurité
library-like package without higher-risk signals.
risque vert · confiance faible · appliance
Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.
exécutables
| Commande | Type | Exposition | Note |
|---|---|---|---|
jcat-tool | exécutable | exécutable indexé | Découvert depuis l'index local des exécutables. |
fraîcheur
Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.
métadonnées d'installation
| Clé du paquet | brew:libjcat |
|---|---|
| Version | 0.2.6 |
| Gestionnaire de paquets | Homebrew |
| Page d'accueil | https://github.com/hughsie/libjcat |
| Dépôt | https://github.com/hughsie/libjcat |
| Bouteille | non enregistré |
| Service | aucun déclaré |
correspondances dans les bases sources
Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.
gir1.2-jcat-1.0 0.2.3-1
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0jcat 0.2.3-1
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcatlibjcat-dev 0.2.3-1
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-devlibjcat-tests 0.2.3-1
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-testslibjcat1 0.2.3-1
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1libjcat
nix profile install nixpkgs#libjcatgir1.2-jcat-1.0 0.2.0-2build3
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0jcat 0.2.0-2build3
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcatlibjcat-dev 0.2.0-2build3
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-devlibjcat-tests 0.2.0-2build3
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-testslibjcat1 0.2.0-2build3
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1libjcat 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcatlibjcat-dev 0.2.3-r2
Library for reading and writing Jcat files (development files)
https://github.com/hughsie/libjcat
sudo apk add libjcat-devlibjcat-doc 0.2.3-r2
Library for reading and writing Jcat files (documentation)
https://github.com/hughsie/libjcat
sudo apk add libjcat-doclibjcat-tools 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcat-toolslibjcat 0.2.6-1.fc45
Library for reading Jcat files
https://github.com/hughsie/libjcat
sudo dnf install libjcatpiste source
Cette page est servie par av-web depuis l'artéfact SQLite privé des paquets généré par scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.