install

Additional install commands

macOS

Homebrewverified · 100%

brew install clazy

provider-native install command

overview

Package summary

Qt oriented static code analyzer

Project links

Homepage

Commands and aliases

clazy
clazy-standalone

history

Project history and usage

Clazy is a Qt-oriented static analyzer built as a Clang compiler plugin and standalone tool. Its upstream README describes it as giving Clang Qt semantics and adding more than 50 Qt-related warnings, including checks for unnecessary allocations, API misuse, and automatic fix-its.

Project history

The upstream changelog records a 0.0.1 first release on 2015-06-10 and a 1.0 release on 2016-09-12. Subsequent releases expanded platform support, check coverage, fix-its, and standalone compilation-database use.

Clazy was originally associated with KDAB-oriented Qt development workflows and is now hosted under KDE's SDK namespace. The current KDE project description calls it a Qt-oriented static code analyzer based on the Clang framework.

Adoption history

The README documents Linux, Windows, MacPorts, and Homebrew build paths, and the batch package metadata lists Alpine, Homebrew, Debian, Fedora, Nix, Arch, Ubuntu, and openSUSE packages. That distribution spread reflects adoption by Qt/C++ developers who want analyzer checks packaged with their compiler toolchains.

Release history shows ongoing updates for modern LLVM and Qt versions, including LLVM 19-22 compatibility work, Qt 6 porting changes, and integration into clang-tidy in the 1.16 series.

How it is used

Clazy is used either as a compiler wrapper/plugin or via clazy-standalone against a JSON compilation database. The README shows CMake and qmake usage, check levels, environment-variable and compiler-argument selection of checks, fix-it support, and warning-noise controls.

Why package nerds care

Clazy is a classic packaging edge case: it sits at the intersection of Qt, Clang/LLVM ABI compatibility, compiler plugins, IDE integration, and distro compiler versions. Package maintainers care because a clazy build must match supported LLVM/Clang ranges while still being useful across Qt 5 and Qt 6 codebases.

Timeline

2015: Version 0.0.1 first release.
2016: Version 1.0 release.
2017: Version 1.1 adds macOS and Windows support.
2017: Version 1.2 adds clazy-standalone for JSON compilation databases.
2021: Version 1.10 requires C++17.
2025: Version 1.16 adds clang-tidy integration.
2026: Version 1.17 continues Qt and LLVM compatibility work.

Related projects

Clang and LLVM provide the compiler framework and plugin surface.
Qt is the target application framework whose idioms and APIs Clazy checks.
clang-tidy is a related analyzer integration point introduced by Clazy 1.16.
KDE hosts the active upstream repository under its SDK namespace.

Sources

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

narrow executable package without higher-risk signals

Signals

metadata:no-higher-risk-signals

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`clazy`	executable	indexed executable	Discovered from the local executable index.
`clazy-standalone`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version1.17.1

manager updated

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:clazy
Version	1.17.1
Package manager	Homebrew
Homepage	https://www.kdab.com/
Bottle	not recorded
Service	none declared

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/clazy.yml

Used sources

Geiger risk classifier
Nucleus package database
curated package history
pkgdb category and tag curation

Install clazy with Homebrew