# globstar を Homebrew でインストール

globstar のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:globstar
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install globstar
```

  証拠: local Homebrew formula metadata

## パッケージ情報

- **パッケージキー:** brew:globstar
- **パッケージマネージャ:** Homebrew
- **バージョン:** 0.7.2
- **ソース概要:** Static analysis toolkit for writing and running code checkers
- **ホームページ:** <https://globstar.dev>
- **リポジトリ:** <https://github.com/DeepSourceCorp/globstar>
- **最終更新:** 2026-07-29T16:05:02+02:00
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- globstar (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 0.7.2
## プロジェクトの歴史と使われ方

Globstar is an open-source static-analysis toolkit from DeepSource for writing custom code checkers and running them through a portable command-line binary.

### プロジェクトの歴史

The project appeared publicly in the DeepSourceCorp GitHub organization in 2025. Its README presents Globstar as a way to expose DeepSource's experience with static analyzers through a smaller open-source tool built around tree-sitter queries, YAML checker definitions, and a Go interface for more complex checks.

### 採用の歴史

Adoption signals are early and mostly package-manager oriented: the project documents a single-binary installer, Homebrew packaging, and CI usage. That positions it for teams that want repository-local SAST rules without building a full compiler-analysis stack.

### 使われ方

Practitioners define custom checkers under a repository's .globstar directory and run globstar check locally or in CI. The documented workflow combines built-in checks with project-specific tree-sitter patterns.

### パッケージ好きにとっての重要性

Globstar is notable in CLI packaging because it packages AST-aware checks as a small Go binary rather than a language-server plugin or SaaS-only workflow.

### タイムライン

- 2025: v0.0.1 tag appeared in the DeepSourceCorp/globstar repository.
- 2025: v0.6.0 was published through GitHub releases.

### Related projects

- Globstar builds on tree-sitter and sits near Semgrep-style custom static-analysis workflows, but its documented checker format is centered on repository-local Globstar YAML and Go checkers.

### ソース

- <https://formulae.brew.sh/formula/globstar>
- <https://github.com/DeepSourceCorp/globstar>
- <https://github.com/DeepSourceCorp/globstar/releases>
- <https://globstar.dev/>
- <https://raw.githubusercontent.com/DeepSourceCorp/globstar/main/README.md>


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals


## Combined YAML source

View the package source record on GitHub. [combined/globstar.yml](https://github.com/mxcl/pkgdb/blob/main/combined/globstar.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph