# curl を Homebrew, apk, chocolatey, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget でインストール curl のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:curl ``` ## エージェント安全性の回答 curl can fetch remote scripts, call APIs, and exfiltrate data from files an agent can read. - **認証情報アクセス:** Reads netrc files, headers, cookies, tokens, and files used as request bodies. - **リモート変更:** Can call arbitrary HTTP APIs that mutate remote systems. - **公開/成果物リスク:** Can upload artifacts or run installer pipelines when paired with a shell. - **推奨コントロール:** Gate credentialed requests, file uploads, and pipe-to-shell installer patterns. - **エージェント利用ガイダンス:** Allow simple public fetches; require approval for authenticated requests, uploads, and shell execution. 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install curl ``` 証拠: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install curl ``` 証拠: MacPorts ports tree: net/curl/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add curl ``` 証拠: Alpine Linux edge package indexes: curl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - Debian apt (92%): ```sh sudo apt install curl ``` 証拠: Debian stable package indexes: curl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - dnf (92%): ```sh sudo dnf install curl ``` 証拠: Fedora Rawhide package metadata: curl from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/210a2053c8e007daf9ae39c2a21daaed9b2ddd07d63ecffa597050361e73650c-primary.xml.zst - Nix (92%): ```sh nix profile install nixpkgs#curl ``` 証拠: nixpkgs package indexes: curl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - pacman (92%): ```sh sudo pacman -S curl ``` 証拠: Arch Linux sync databases: curl from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz - zypper (92%): ```sh sudo zypper install curl ``` 証拠: openSUSE Tumbleweed package metadata: curl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ### Windows - Chocolatey (92%): ```sh choco install curl ``` 証拠: Chocolatey community package catalog: curl from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','crystaldiskinfo' - Scoop (92%): ```sh scoop install main/curl ``` 証拠: Scoop official bucket manifest trees: bucket/curl.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1 - winget (92%): ```sh winget install --id cURL.cURL -e ``` 証拠: Windows Package Manager source index: cURL.cURL from https://cdn.winget.microsoft.com/cache/source.msix ## パッケージ情報 - **パッケージキー:** brew:curl - **パッケージマネージャ:** Homebrew - **パッケージマネージャページ:** - **バージョン:** 8.21.0 - **ソース概要:** Get a file from an HTTP, HTTPS or FTP server - **ホームページ:** - **リポジトリ:** - **上流ドキュメント:** - **ライセンス:** curl - **ソースアーカイブ:** - **最終更新:** 2026-06-27T15:50:29Z - **生成日時:** 2026-08-04T22:13:35+00:00 ## 実行可能ファイル - curl (cli) - curl-config (cli) - wcurl (cli) - curl (エイリアス) - curl-config (エイリアス) - wcurl (エイリアス) ## 依存関係 - brotli - libnghttp2 - libnghttp3 - libngtcp2 - libpsl - libssh2 - openssl@3 - zstd ## ビルド依存関係 - pkgconf ## macOS 提供ライブラリ - krb5 - openldap ## インストール挙動 - post-install フック: 未定義 - Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux ## バージョンと鮮度 - ページ生成日: 2026-08-04 - マネージャ版: 8.21.0 - マネージャ更新日: 2026-06-27 - ローカルデータ: OK - 上流リポジトリ: https://curl.se - 情報: Release/tag comparison is only available for GitHub repositories. ## プロジェクトの歴史と使われ方 curl is a command-line transfer tool and libcurl is its underlying URL transfer library. Together they became one of the default pieces of Internet plumbing in Unix-like systems, Windows, language runtimes, build systems, containers, and scripts. ### プロジェクトの歴史 curl traces back to late 1996, when Daniel Stenberg extended Rafael Sagula's HttpGet utility while building an IRC bot feature for currency exchange lookups. The project moved from HttpGet to urlget as protocols beyond HTTP were added, then became curl in March 1998 after upload support made the older name misleading. ### 採用の歴史 The project history records early Linux RPM packaging in 1998, the first Debian package in 1999, a non-beta libcurl interface in 2000, PHP adopting libcurl the same year, and Mac OS X bundling curl in 2001. By 2018, curl's history page described it as shipped in Windows 10 and estimated curl and libcurl at five billion installed instances; by 2020 that estimate reached ten billion instances. ### 使われ方 curl is used interactively and in scripts to transfer data over URL-addressed protocols, especially HTTP(S), FTP(S), SMTP, IMAP, SFTP, WebSocket, and related network protocols. libcurl is embedded by applications that need the same transfer features through a stable C API. ### パッケージ好きにとっての重要性 curl matters to package managers because it is often both a package and a bootstrap tool: build scripts fetch with it, test suites depend on it, and other packages link against libcurl. Packaging has to track TLS backends, protocol feature flags, CA certificate behavior, ABI stability, and the split between the curl executable, libcurl, headers, and curl-config. ### タイムライン - 1996: HttpGet 0.1 released; Daniel Stenberg soon becomes maintainer. - 1998: curl 4 released under the curl name. - 1999: First Debian package recorded in upstream history. - 2000: libcurl non-beta interface arrives and PHP adopts libcurl. - 2001: curl bundled in Mac OS X 10.1. - 2010: Project switches from CVS to git hosted by GitHub. - 2018: Windows 10 starts shipping curl. - 2020: Upstream estimates 10 billion curl and libcurl installations worldwide. - 2024: wcurl adopted into the curl organization. ### Related projects - libcurl, wcurl, trurl, HTTPie, Curlie, and cURLpp are adjacent projects in the curl ecosystem. ### ソース - - - - ## セキュリティノート doc example: network transfer tool. - **Geiger リスク:** blue / 高 - doc example: network transfer tool ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: ~/.curlrc ## Credential files - Unix: ~/.netrc, ~/.curlrc ## ソースデータベース詳細 - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** curl - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** yes - **URL Keys:** head, stable ## 他のパッケージマネージャ記録 - Debian apt - curl - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: curl from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | command line tool for transferring data with URL syntax | https://curl.se/ - Debian apt - libcurl3t64-gnutls - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl3t64-gnutls from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | easy-to-use client-side URL transfer library (GnuTLS flavour) | https://curl.se/ - Debian apt - libcurl4-doc - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-doc from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | documentation for libcurl | https://curl.se/ - Debian apt - libcurl4-gnutls-dev - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-gnutls-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files and documentation for libcurl (GnuTLS flavour) | https://curl.se/ - Debian apt - libcurl4-openssl-dev - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4-openssl-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | development files and documentation for libcurl (OpenSSL flavour) | https://curl.se/ - Debian apt - libcurl4t64 - 8.14.1-2+deb13u4: normalized package name match | Debian stable package indexes: libcurl4t64 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | easy-to-use client-side URL transfer library (OpenSSL flavour) | https://curl.se/ - Nix - curl: normalized package name match | nixpkgs package indexes: curl from https://raw.githubusercontent.com/NixOS/nixpkgs/master/pkgs/top-level/all-packages.nix - Ubuntu apt - curl - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: curl from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | command line tool for transferring data with URL syntax | https://curl.se/ - Ubuntu apt - libcurl3t64-gnutls - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl3t64-gnutls from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | easy-to-use client-side URL transfer library (GnuTLS flavour) | https://curl.se/ - Ubuntu apt - libcurl4-doc - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-doc from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | documentation for libcurl | https://curl.se/ - Ubuntu apt - libcurl4-gnutls-dev - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-gnutls-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development files and documentation for libcurl (GnuTLS flavour) | https://curl.se/ - Ubuntu apt - libcurl4-openssl-dev - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4-openssl-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | development files and documentation for libcurl (OpenSSL flavour) | https://curl.se/ - Ubuntu apt - libcurl4t64 - 8.5.0-2ubuntu10: normalized package name match | Ubuntu 24.04 LTS package indexes: libcurl4t64 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | easy-to-use client-side URL transfer library (OpenSSL flavour) | https://curl.se/ - apk - curl - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library | https://curl.se/ - apk - curl-dbg - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl-dbg from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library (debug symbols) | https://curl.se/ - apk - curl-dev - 8.21.0-r0: normalized package name match | Alpine Linux edge package indexes: curl-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | URL retrieval utility and library (development files) | https://curl.se/ ## 関連リンク - [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Networking and protocol packages](https://pkg.so/ja/networking-protocol-tools/) - Matched network, protocol, or remote-service metadata. - [Database and data packages](https://pkg.so/ja/database-data-tools/) - Matched database, SQL, migration, or data-store metadata. - [openssl@3](https://pkg.so/ja/brew/openssl-3/) - Runtime dependency declared by Homebrew. - [zstd](https://pkg.so/ja/brew/zstd/) - Runtime dependency declared by Homebrew. - [brotli](https://pkg.so/ja/brew/brotli/) - Runtime dependency declared by Homebrew. - [libpsl](https://pkg.so/ja/brew/libpsl/) - Runtime dependency declared by Homebrew. - [pkgconf](https://pkg.so/ja/brew/pkgconf/) - Build dependency declared by Homebrew. - [php](https://pkg.so/ja/brew/php/) - Popular package that depends on this formula. - [php@8.3](https://pkg.so/ja/brew/php-8-3/) - Popular package that depends on this formula. - [php@8.2](https://pkg.so/ja/brew/php-8-2/) - Popular package that depends on this formula. - [php@8.4](https://pkg.so/ja/brew/php-8-4/) - Popular package that depends on this formula. - [php@8.1](https://pkg.so/ja/brew/php-8-1/) - Popular package that depends on this formula. - [julia](https://pkg.so/ja/brew/julia/) - Popular package that depends on this formula. - [pdal](https://pkg.so/ja/brew/pdal/) - Popular package that depends on this formula. - [lastpass-cli](https://pkg.so/ja/brew/lastpass-cli/) - Popular package that depends on this formula. - [c-ares](https://pkg.so/ja/brew/c-ares/) - Shares pkgdb curated category or tags: cli, library, networking. - [libidn2](https://pkg.so/ja/brew/libidn2/) - Shares pkgdb curated category or tags: cli, library, networking. - [freerdp](https://pkg.so/ja/brew/freerdp/) - Shares pkgdb curated category or tags: cli, library, networking. - [libnice](https://pkg.so/ja/brew/libnice/) - Shares pkgdb curated category or tags: cli, library, networking. - [lftp](https://pkg.so/ja/brew/lftp/) - Shares pkgdb curated category or tags: cli, http-client, networking. - [czmq](https://pkg.so/ja/brew/czmq/) - Shares pkgdb curated category or tags: cli, library, networking. - [libnet](https://pkg.so/ja/brew/libnet/) - Shares pkgdb curated category or tags: cli, library, networking. - [libproxy](https://pkg.so/ja/brew/libproxy/) - Shares pkgdb curated category or tags: cli, library, networking. - [cadaver](https://pkg.so/ja/brew/cadaver/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, client, file, http, http-client. - [proxygen](https://pkg.so/ja/brew/proxygen/) - Local metadata places this package in an adjacent workflow. Shared terms: cli, client, curl, http, library. ## Combined YAML source View the package source record on GitHub. [combined/curl.yml](https://github.com/mxcl/pkgdb/blob/main/combined/curl.yml) ## ソース - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph - curated agent safety answer