# bumblebee を Homebrew, apt, Nix, pacman, zypper でインストール bumblebee のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。 ## インストール ```sh sudo av install brew:bumblebee ``` 追加のインストールコマンド: ### macOS - Homebrew (100%): ```sh brew install bumblebee ``` 証拠: local Homebrew formula metadata ### Linux - Debian apt (92%): ```sh sudo apt install bumblebee ``` 証拠: Debian stable package indexes: bumblebee from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz - Nix (92%): ```sh nix profile install nixpkgs#bumblebee ``` 証拠: nixpkgs package indexes: pkgs/by-name/bu/bumblebee/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S bumblebee ``` 証拠: Arch Linux sync databases: bumblebee from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz - zypper (92%): ```sh sudo zypper install bumblebee ``` 証拠: openSUSE Tumbleweed package metadata: bumblebee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## パッケージ情報 - **パッケージキー:** brew:bumblebee - **パッケージマネージャ:** Homebrew - **バージョン:** 0.1.2 - **ソース概要:** Read-only developer endpoint scanner for supply-chain exposure - **ホームページ:** - **リポジトリ:** - **最終更新:** 2026-07-26T10:56:36+02:00 - **生成日時:** 2026-08-03T19:37:03+00:00 ## 実行可能ファイル - bumblebee (エイリアス) ## インストール挙動 - Bottle: 利用不可 ## バージョンと鮮度 - ページ生成日: 2026-08-03 - マネージャ版: 0.1.2 ## プロジェクトの歴史と使われ方 Bumblebee is a Perplexity AI endpoint inventory scanner for software supply-chain response. It is designed to answer which developer machines show on-disk evidence of a named package, extension, or version during an incident. ### プロジェクトの歴史 The public repository was created in May 2026. Its first tagged public release, v0.1.1, was published on May 22, 2026, and v0.1.2 followed in June with additional exposure catalog coverage. The README emphasizes a deliberately narrow scope: a single static Go binary, read-only scanning, zero non-standard-library dependencies, and no package-manager execution. Instead of asking package managers what is installed, Bumblebee parses lockfiles, installed metadata, extension manifests, and selected developer-tool configuration files. ### 採用の歴史 Bumblebee arrived in the context of 2020s supply-chain incidents where responders needed quick fleet-wide answers about vulnerable or compromised developer tooling. Its early visibility is stronger than most new CLI tools because it comes from Perplexity AI and addresses active developer-endpoint inventory needs. ### 使われ方 Users run `bumblebee scan` with baseline, project, or deep profiles and receive NDJSON package and finding records. With an exposure catalog, it can suppress ordinary package records and emit only exact package-exposure matches for response workflows. ### パッケージ好きにとっての重要性 For package-history work, Bumblebee is significant as a scanner of package-manager residue rather than a package manager itself. It catalogs npm, pnpm, Yarn, Bun, PyPI, Go, RubyGems, Composer, Homebrew, editor extensions, browser extensions, MCP configs, and agent-skill lock files, making it a snapshot of what modern developer machines accumulate. ### タイムライン - 2026-05: Public GitHub repository created. - 2026-05-22: v0.1.1 published as the initial public release. - 2026-06-18: v0.1.2 added more exposure catalog coverage. ### Related projects - Related systems include SBOM generators, endpoint detection tools, package-lock analyzers, and supply-chain scanners. Bumblebee's README explicitly distinguishes its local-state view from SBOMs that describe shipped software and EDR systems that describe executed behavior. ### ソース - - - - ## セキュリティノート bumblebee に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。 ## 他のパッケージマネージャ記録 - Debian apt - bumblebee - 3.2.1-32: normalized package name match | Debian stable package indexes: bumblebee from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | NVIDIA Optimus support for Linux | https://launchpad.net/~bumblebee - Debian apt - bumblebee-nvidia - 3.2.1-32: normalized package name match | Debian stable package indexes: bumblebee-nvidia from https://deb.debian.org/debian/dists/stable/contrib/binary-amd64/Packages.xz | NVIDIA Optimus support using the proprietary NVIDIA driver | https://launchpad.net/~bumblebee - Nix - bumblebee: normalized package name match | nixpkgs package indexes: pkgs/by-name/bu/bumblebee/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - Ubuntu apt - bumblebee - 3.2.1-29ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: bumblebee from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | NVIDIA Optimus support for Linux | https://launchpad.net/~bumblebee - Ubuntu apt - bumblebee-nvidia - 3.2.1-29ubuntu3: normalized package name match | Ubuntu 24.04 LTS package indexes: bumblebee-nvidia from https://archive.ubuntu.com/ubuntu/dists/noble/multiverse/binary-amd64/Packages.gz | NVIDIA Optimus support using the proprietary NVIDIA driver | https://launchpad.net/~bumblebee - pacman - bumblebee - 3.2.1-21: normalized package name match | Arch Linux sync databases: bumblebee from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | NVIDIA Optimus support for Linux through VirtualGL | http://www.bumblebee-project.org - zypper - bumblebee - 3.2.1-14.25: normalized package name match | openSUSE Tumbleweed package metadata: bumblebee from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | NVidia Optimus support for GNU/Linux aimed at stability | https://github.com/Bumblebee-Project/bumblebee ## Combined YAML source View the package source record on GitHub. [combined/bumblebee.yml](https://github.com/mxcl/pkgdb/blob/main/combined/bumblebee.yml) ## ソース - pkg.so package database - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph