# flawz を Homebrew, apk, MacPorts, Nix, pacman でインストール

flawz のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:flawz
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install flawz
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install flawz
```

  証拠: MacPorts ports tree: security/flawz/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add flawz
```

  証拠: Alpine Linux edge package indexes: flawz from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#flawz
```

  証拠: nixpkgs package indexes: pkgs/by-name/fl/flawz/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S flawz
```

  証拠: Arch Linux sync databases: flawz from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz

## パッケージ情報

- **パッケージキー:** brew:flawz
- **パッケージマネージャ:** Homebrew
- **パッケージマネージャページ:** <https://formulae.brew.sh/formula/flawz>
- **バージョン:** 0.4.1
- **ソース概要:** Terminal UI for browsing security vulnerabilities (CVEs)
- **ホームページ:** <https://github.com/orhun/flawz>
- **リポジトリ:** <https://github.com/orhun/flawz>
- **ライセンス:** Apache-2.0 OR MIT
- **ソースアーカイブ:** <https://github.com/orhun/flawz/archive/refs/tags/v0.4.1.tar.gz>
- **最終更新:** 2026-06-14T05:08:26Z
- **生成日時:** 2026-08-04T22:13:35+00:00

## 実行可能ファイル

- flawz (cli)
- flawz (エイリアス)

## ビルド依存関係

- pkgconf
- rust

## macOS 提供ライブラリ

- sqlite

## インストール挙動

- post-install フック: 未定義
- Bottle: 利用可能 対象 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## バージョンと鮮度

- ページ生成日: 2026-08-04
- マネージャ版: 0.4.1
- マネージャ更新日: 2026-06-14
- ローカルデータ: OK
- 上流リポジトリ: https://github.com/orhun/flawz
- 検出された最新: v0.4.1 (最新)
## プロジェクトの歴史と使われ方

flawz is a Rust terminal user interface for browsing CVE security vulnerability data. It packages NVD-backed vulnerability search into a local CLI/TUI workflow with SQLite storage, theming, offline use, and optional NVD API-key acceleration.

### プロジェクトの歴史

The upstream GitHub repository was created in 2024. The README presents flawz as a terminal UI for browsing security vulnerabilities, using NIST's NVD as the default vulnerability database and offering search, listing, theming, and details views in the terminal.

The release stream began with v0.1.0 in May 2024 and reached v0.4.1 in June 2026, according to the official GitHub releases API.

### 採用の歴史

The official README documents installation through Cargo, Arch Linux official repositories, Alpine Edge, Homebrew, Nixpkgs unstable, NetBSD pkgsrc, binary releases, and source builds. That unusually broad package-manager list for a young Rust TUI reflects quick adoption by distribution packagers interested in CVE tooling.

### 使われ方

flawz syncs NVD feeds into a SQLite database, accepts year ranges and recent or modified feeds, and can start directly on a query such as an xz CVE search. Users can pass an NVD API key with `--api-key` or `NVD_API_KEY` for higher NVD rate limits, choose themes, and use offline mode against cached data.

### パッケージ好きにとっての重要性

flawz is package-nerd relevant because it combines several current CLI trends in one small package: Rust distribution through crates.io and native package managers, terminal UI ergonomics, local SQLite caching, and security metadata browsing tied to the NVD feed ecosystem.

### タイムライン

- 2024: GitHub repository created.
- 2024: v0.1.0 released on May 18.
- 2024: v0.3.0 released on November 3.
- 2026: v0.4.0 and v0.4.1 released on June 13.

### Related projects

- NVD and NIST provide the default vulnerability database used by flawz.
- crates.io, docs.rs, Cargo, Arch Linux, Alpine, Homebrew, Nixpkgs, NetBSD pkgsrc, and SQLite are part of the documented packaging and runtime context.

### ソース

- <https://api.github.com/repos/orhun/flawz>
- <https://api.github.com/repos/orhun/flawz/releases?per_page=20>
- <https://formulae.brew.sh/formula/flawz>
- <https://github.com/orhun/flawz>
- <https://raw.githubusercontent.com/orhun/flawz/main/README.md>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals

## ソースデータベース詳細

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** flawz
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## 他のパッケージマネージャ記録

- Nix - flawz: normalized package name match | nixpkgs package indexes: pkgs/by-name/fl/flawz/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - flawz - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A Terminal UI for browsing CVEs | https://github.com/orhun/flawz
- apk - flawz-bash-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Bash completions for flawz | https://github.com/orhun/flawz
- apk - flawz-doc - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A Terminal UI for browsing CVEs (documentation) | https://github.com/orhun/flawz
- apk - flawz-fish-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Fish completions for flawz | https://github.com/orhun/flawz
- apk - flawz-zsh-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Zsh completions for flawz | https://github.com/orhun/flawz
- pacman - flawz - 0.4.1-1: normalized package name match | Arch Linux sync databases: flawz from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A Terminal UI for browsing security vulnerabilities (CVEs) | https://github.com/orhun/flawz
- MacPorts - flawz: normalized package name match | MacPorts ports tree: security/flawz/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1


## 関連リンク

- [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://pkg.so/ja/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Language runtime packages](https://pkg.so/ja/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata.
- [pkgconf](https://pkg.so/ja/brew/pkgconf/) - Build dependency declared by Homebrew.
- [rust](https://pkg.so/ja/brew/rust/) - Build dependency declared by Homebrew.
- [gpg-tui](https://pkg.so/ja/brew/gpg-tui/) - Shares pkgdb curated category or tags: cli, rust, security, tui.
- [feroxbuster](https://pkg.so/ja/brew/feroxbuster/) - Shares pkgdb curated category or tags: cli, rust, security.
- [rustscan](https://pkg.so/ja/brew/rustscan/) - Shares pkgdb curated category or tags: cli, rust, security.
- [jwt-cli](https://pkg.so/ja/brew/jwt-cli/) - Shares pkgdb curated category or tags: cli, rust, security.
- [cargo-audit](https://pkg.so/ja/brew/cargo-audit/) - Shares pkgdb curated category or tags: cli, rust, security.
- [yara-x](https://pkg.so/ja/brew/yara-x/) - Shares pkgdb curated category or tags: cli, rust, security.
- [cargo-deny](https://pkg.so/ja/brew/cargo-deny/) - Shares pkgdb curated category or tags: cli, rust, security.
- [evtx](https://pkg.so/ja/brew/evtx/) - Shares pkgdb curated category or tags: cli, rust, security.
- [cve-bin-tool](https://pkg.so/ja/brew/cve-bin-tool/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, cve, security, vulnerabilities, vulnerability.
- [chainsaw](https://pkg.so/ja/brew/chainsaw/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, rust, search, security.
- [auditjs](https://pkg.so/ja/npm/auditjs/) - Security-sensitive metadata or terminology overlaps. Shared terms: cli, cve, security, vulnerabilities, vulnerability.

## Combined YAML source

View the package source record on GitHub. [combined/flawz.yml](https://github.com/mxcl/pkgdb/blob/main/combined/flawz.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph