# Install flawz with Homebrew, apk, MacPorts, Nix, pacman Terminal UI for browsing security vulnerabilities (CVEs). Version 0.4.1 via Homebrew; verified 2026-06-14. Also installable with nix: nix profile install nixpkgs#flawz. ## Install ```sh sudo av install brew:flawz ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install flawz ``` Evidence: local Homebrew formula metadata - MacPorts (94%): ```sh sudo port install flawz ``` Evidence: MacPorts ports tree: security/flawz/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ### Linux - apk (92%): ```sh sudo apk add flawz ``` Evidence: Alpine Linux edge package indexes: flawz from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - Nix (92%): ```sh nix profile install nixpkgs#flawz ``` Evidence: nixpkgs package indexes: pkgs/by-name/fl/flawz/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - pacman (92%): ```sh sudo pacman -S flawz ``` Evidence: Arch Linux sync databases: flawz from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz ## Package facts - **Package key:** brew:flawz - **Package manager:** Homebrew - **Version:** 0.4.1 - **Source summary:** Terminal UI for browsing security vulnerabilities (CVEs) - **Homepage:** - **Repository:** - **Last updated:** 2026-06-14T05:08:26Z - **Generated:** 2026-08-03T19:37:03+00:00 ## Executables - flawz (alias) ## Install behavior - Bottle: not available ## Freshness - Page generated: 2026-08-03 - Package-manager version: 0.4.1 ## Project history and usage flawz is a Rust terminal user interface for browsing CVE security vulnerability data. It packages NVD-backed vulnerability search into a local CLI/TUI workflow with SQLite storage, theming, offline use, and optional NVD API-key acceleration. ### Project history The upstream GitHub repository was created in 2024. The README presents flawz as a terminal UI for browsing security vulnerabilities, using NIST's NVD as the default vulnerability database and offering search, listing, theming, and details views in the terminal. The release stream began with v0.1.0 in May 2024 and reached v0.4.1 in June 2026, according to the official GitHub releases API. ### Adoption history The official README documents installation through Cargo, Arch Linux official repositories, Alpine Edge, Homebrew, Nixpkgs unstable, NetBSD pkgsrc, binary releases, and source builds. That unusually broad package-manager list for a young Rust TUI reflects quick adoption by distribution packagers interested in CVE tooling. ### How it is used flawz syncs NVD feeds into a SQLite database, accepts year ranges and recent or modified feeds, and can start directly on a query such as an xz CVE search. Users can pass an NVD API key with `--api-key` or `NVD_API_KEY` for higher NVD rate limits, choose themes, and use offline mode against cached data. ### Why package nerds care flawz is package-nerd relevant because it combines several current CLI trends in one small package: Rust distribution through crates.io and native package managers, terminal UI ergonomics, local SQLite caching, and security metadata browsing tied to the NVD feed ecosystem. ### Timeline - 2024: GitHub repository created. - 2024: v0.1.0 released on May 18. - 2024: v0.3.0 released on November 3. - 2026: v0.4.0 and v0.4.1 released on June 13. ### Related projects - NVD and NIST provide the default vulnerability database used by flawz. - crates.io, docs.rs, Cargo, Arch Linux, Alpine, Homebrew, Nixpkgs, NetBSD pkgsrc, and SQLite are part of the documented packaging and runtime context. ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Other Package-Manager Records - Nix - flawz: normalized package name match | nixpkgs package indexes: pkgs/by-name/fl/flawz/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - apk - flawz - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A Terminal UI for browsing CVEs | https://github.com/orhun/flawz - apk - flawz-bash-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-bash-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Bash completions for flawz | https://github.com/orhun/flawz - apk - flawz-doc - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | A Terminal UI for browsing CVEs (documentation) | https://github.com/orhun/flawz - apk - flawz-fish-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-fish-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Fish completions for flawz | https://github.com/orhun/flawz - apk - flawz-zsh-completion - 0.4.1-r0: normalized package name match | Alpine Linux edge package indexes: flawz-zsh-completion from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Zsh completions for flawz | https://github.com/orhun/flawz - pacman - flawz - 0.4.1-1: normalized package name match | Arch Linux sync databases: flawz from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz | A Terminal UI for browsing security vulnerabilities (CVEs) | https://github.com/orhun/flawz - MacPorts - flawz: normalized package name match | MacPorts ports tree: security/flawz/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1 ## Combined YAML source View the package source record on GitHub. [combined/flawz.yml](https://github.com/mxcl/pkgdb/blob/main/combined/flawz.yml) ## Sources - pkg.so package database - Geiger risk classifier - curated package history - pkgdb category and tag curation - external package-manager database matches - cross-ecosystem install command graph