# expat を Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper でインストール

expat のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:expat
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install expat
```

  証拠: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install expat
```

  証拠: MacPorts ports tree: textproc/expat/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add expat
```

  証拠: Alpine Linux edge package indexes: expat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install expat
```

  証拠: Debian stable package indexes: expat from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install expat
```

  証拠: Fedora Rawhide package metadata: expat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#expat
```

  証拠: nixpkgs package indexes: pkgs/by-name/ex/expat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S expat
```

  証拠: Arch Linux sync databases: expat from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install expat
```

  証拠: openSUSE Tumbleweed package metadata: expat from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## パッケージ情報

- **パッケージキー:** brew:expat
- **パッケージマネージャ:** Homebrew
- **バージョン:** 2.8.2
- **ソース概要:** XML 1.0 parser
- **ホームページ:** <https://libexpat.github.io/>
- **リポジトリ:** <https://github.com/libexpat/libexpat>
- **最終更新:** 2026-06-25T21:42:09Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- xmlwf (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 2.8.2
## プロジェクトの歴史と使われ方

Expat is a fast streaming XML parser library written in C, with xmlwf as its command-line well-formedness checker. It is package-manager-famous because XML parsing became infrastructure, and Expat is small, MIT-licensed, embeddable, and widely shipped.

### プロジェクトの歴史

The official repository describes Expat as a C99 library for parsing XML 1.0, started by James Clark in 1997. Its model is event-oriented: users register handlers before parsing, and those handlers are called as document structures are discovered.

The project site frames Expat around streaming rather than building a full in-memory document tree. That makes it useful for files too large to fit in memory, and for applications where parser performance and flexible callbacks are more important than a high-level DOM interface.

### 採用の歴史

The Expat homepage states that numerous applications, libraries, and hardware use Expat, that bindings and third-party wrappers exist, and that Expat is packaged everywhere. That breadth is the key adoption story: many users never invoke xmlwf directly, but they depend on Expat through another program or language runtime.

The repository README documents common build-system integration, including CMake find_package usage. That is a sign of mature library adoption: Expat is not just an executable in package managers, but a dependency with headers, link targets, and ABI expectations.

### 使われ方

Developers use libexpat when they want a C XML parser that calls application-defined handlers for starts, ends, character data, and related XML structures. The included xmlwf executable is used to check whether XML input is well formed.

Because XML parsers sit at input boundaries, Expat's package history is often security-driven. The official GitHub issue tracker includes release coordination that references downstream updates in CPython, Gentoo, Spack, Homebrew, NixOS, MSYS2, and other packaging ecosystems when CVE fixes land.

### パッケージ好きにとっての重要性

Expat is a dependency-package archetype: boring when healthy, urgent when vulnerable. It is small enough to be embedded or vendored, but important enough that a security update can ripple through Python, Linux distributions, language package sets, and embedded builds.

The package also demonstrates the difference between library identity and command identity. Homebrew exposes xmlwf as the executable, while the real package value is libexpat and its headers.

### タイムライン

- 1997: James Clark started Expat.
- 2.4.x: Security releases triggered broad downstream package updates.
- 2025: Expat 2.7.2 release coordination referenced Homebrew, CPython, NixOS, MSYS2, Spack, Gentoo, and other downstreams.
- 2026: Expat 2.8.x release coordination continued around security fixes and downstream updates.

### Related projects

- CPython is a major downstream because Python includes pyexpat bindings and coordinates bundled Expat updates.
- CMake's FindEXPAT module is an important integration path for C and C++ projects.
- Other XML parsers are related by role, but Expat's official documentation emphasizes its streaming C API.

### ソース

- <https://github.com/libexpat/libexpat>
- <https://libexpat.github.io/>
- <https://libexpat.github.io/doc/>
- <https://libexpat.github.io/doc/api/latest/>
- <https://github.com/libexpat/libexpat/issues/1030>
- <https://github.com/libexpat/libexpat/issues/1214>


## セキュリティノート

expat に一致するローカルシークレット処理マニフェストは見つかりませんでした。将来の対応で安定したパッケージ URL を使えるよう、Nucleus パッケージメタデータはここに公開されています。


## 他のパッケージマネージャ記録

- Debian apt - expat - 2.7.1-2: normalized package name match | Debian stable package indexes: expat from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - example application | https://libexpat.github.io/
- Debian apt - libexpat1 - 2.7.1-2: normalized package name match | Debian stable package indexes: libexpat1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - runtime library | https://libexpat.github.io/
- Debian apt - libexpat1-dev - 2.7.1-2: normalized package name match | Debian stable package indexes: libexpat1-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - development kit | https://libexpat.github.io/
- Nix - expat: normalized package name match | nixpkgs package indexes: pkgs/by-name/ex/expat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - expat - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: expat from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | XML parsing C library - example application | https://libexpat.github.io/
- Ubuntu apt - libexpat1 - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libexpat1 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | XML parsing C library - runtime library | https://libexpat.github.io/
- Ubuntu apt - libexpat1-dev - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libexpat1-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | XML parsing C library - development kit | https://libexpat.github.io/
- apk - expat - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C | https://libexpat.github.io/
- apk - expat-dev - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (development files) | https://libexpat.github.io/
- apk - expat-doc - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (documentation) | https://libexpat.github.io/
- apk - expat-static - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (static library) | https://libexpat.github.io/
- apk - libexpat - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: libexpat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (libraries) | https://libexpat.github.io/
- dnf - expat - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | An XML parser library | https://libexpat.github.io/
- dnf - expat-devel - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Libraries and header files to develop applications using expat | https://libexpat.github.io/
- dnf - expat-static - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat-static from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | expat XML parser static library | https://libexpat.github.io/
- pacman - expat - 2.8.2-1: normalized package name match | Arch Linux sync databases: expat from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz | An XML parser library | https://libexpat.github.io/


## Combined YAML source

View the package source record on GitHub. [combined/expat.yml](https://github.com/mxcl/pkgdb/blob/main/combined/expat.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph
