macOS
brew install cargo-bundlelocal Homebrew formula metadata
brew / rank 4211
Wrap rust executables in OS-specific app bundles. Version 0.11.0 via Homebrew; verified 2026-05-31. Also installable with nix: nix profile install nixpkgs#cargo-bundle.
install
brew install cargo-bundlelocal Homebrew formula metadata
nix profile install nixpkgs#cargo-bundlenixpkgs package indexes · pkgs/by-name/ca/cargo-bundle/package.nix · source: api.github.com
overview
Wrap rust executables in OS-specific app bundles
history
cargo-bundle is a Cargo subcommand for wrapping Rust GUI executables into operating-system application bundles and installer formats.
The cargo-bundle repository was created in January 2016 and the first crates.io release followed in March 2016. The README positions it as a tool for generating macOS app bundles, iOS bundles, Debian packages, and experimental Windows MSI installers from Cargo-built executables.
Its design centers on a `[package.metadata.bundle]` section in Cargo.toml. That metadata describes user-facing application attributes such as name, identifier, icon, version, resources, copyright, category, descriptions, Debian dependencies, macOS frameworks, and URL schemes.
cargo-bundle occupies a narrower niche than compiler or profiling Cargo plugins: desktop and GUI Rust applications. Crates.io reports more than 150,000 downloads, and the input records Homebrew and Nix packaging.
The project remained useful because early Rust desktop applications needed a Cargo-native way to bridge from a compiled binary to platform packaging conventions without adopting a full application framework.
Users install it with `cargo install cargo-bundle`, add `[package.metadata.bundle]` to Cargo.toml, and run `cargo bundle` from the package directory. The command supports familiar Cargo selectors and build controls such as `--bin`, `--example`, `--release`, `--profile`, `--target`, and feature flags.
The README documents output formats including deb, ios, msi, wxsmsi, osx, rpm, and appimage, while also warning that the project status is early alpha and that the metadata format is not guaranteed stable.
cargo-bundle is historically interesting because it embeds desktop packaging metadata inside Cargo.toml rather than treating app bundling as an entirely external release step. It shows how Rust package metadata became a place for downstream packaging intent, not just dependency resolution.
For package maintainers, it connects Rust crates to platform-native artifacts such as `.app`, `.deb`, and `.msi`, making it a small but useful example of Cargo crossing from language package manager into OS package production.
security posture
narrow executable package without higher-risk signals.
green risk · low confidence · appliance
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
Cargo.tomlCargo.tomlexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
cargo-bundle | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:cargo-bundle |
|---|---|
| Version | 0.11.0 |
| Package manager | Homebrew |
| Homepage | https://github.com/burtonageo/cargo-bundle |
| Repository | https://github.com/burtonageo/cargo-bundle |
| Last updated | 2026-05-31T10:36:43Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
cargo-bundle
nix profile install nixpkgs#cargo-bundlesource trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.