Credential access
Reads local package config and environment paths, not secrets by default.
brew / approval gates / rank 19
Install pkgconf with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper, scoop, winget
Package compiler and linker metadata toolkit. Version 3.0.7 via Homebrew; verified 2026-09-10. Also installable with debian: sudo apt install libpkgconf-dev.
agent safety
Agent safety answer
pkgconf resolves build flags that influence native builds and linked artifacts.
Remote mutation
Does not mutate remote systems directly.
Publish/artifact risk
Can influence compiled artifact behavior through build metadata.
Recommended control
Gate use only when paired with release builds or untrusted search paths.
Agent-use guidance
Allow normal build introspection; require approval for release builds using untrusted pkg-config paths.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install pkgconflocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install pkgconfMacPorts ports tree · devel/pkgconf/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add pkgconfAlpine Linux edge package indexes · pkgconf · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install pkgconfDebian stable package indexes · pkgconf · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install pkgconfFedora Rawhide package metadata · pkgconf · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#pkgconfnixpkgs package indexes · pkgconf · source: raw.githubusercontent.com
Arch Linux pacmanverified · 92%
sudo pacman -S pkgconfArch Linux sync databases · pkgconf · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install pkgconfopenSUSE Tumbleweed package metadata · pkgconf · source: download.opensuse.org
Windows
Scoopverified · 92%
scoop install main/pkgconfScoop official bucket manifest trees · bucket/pkgconf.json · source: api.github.com
Windows Package Managerverified · 92%
winget install --id pkgconf.pkgconf -eWindows Package Manager source index · pkgconf.pkgconf · source: cdn.winget.microsoft.com
overview
Package summary
Package compiler and linker metadata toolkit
Project links
Commands and aliases
- bomtool
- pccritic
- pkg-config
- pkgconf
- spdxtool
history
Project history and usage
pkgconf is a cross-platform implementation and extension of the pkg-config model for discovering development libraries and calculating their compiler and linker flags.
Project history
pkgconf emerged as an alternative implementation of the pkg-config interface and developed into a broader package compiler and linker metadata toolkit. Upstream describes it as a functional superset of freedesktop.org pkg-config while explicitly declining bug-for-bug compatibility.
The project expanded beyond its command-line frontend to provide libpkgconf and SBOM-oriented utilities. Its current build uses Meson, with a lightweight Makefile option for pkg-config-only bootstrap use and Muon support where Python is unavailable.
Adoption history
pkgconf has been adopted across many operating-system package ecosystems and is frequently exposed through a pkg-config-compatible command name. The supplied package facts list Alpine, Homebrew, Debian, Fedora-family, MacPorts, Nix, Arch, Ubuntu, openSUSE, Scoop, and WinGet packages.
The upstream project deliberately leaves creation of the pkg-config symlink to operating-system vendors, making the compatibility command an explicit packaging-policy decision.
How it is used
Build systems and developers query pkgconf with package names to obtain compiler and linker flags derived from installed .pc metadata. It can be invoked directly as pkgconf or, when the operating-system vendor provides a symlink, as pkg-config.
Users should depend on stable query interfaces rather than parsing --debug output. Correct dependency declarations in .pc files allow pkgconf to flatten dependency graphs and reduce overlinking.
Why package nerds care
pkgconf sits on a critical seam between package metadata and native compilation. It resolves .pc module relationships and emits the include paths, compiler options, and linker flags consumed by build systems.
Compared with the original pkg-config implementation, pkgconf emphasizes graph-based dependency solving, large dependency graphs, virtual packages, Conflicts handling, and avoiding unnecessary overlinking. It also exposes libpkgconf for integration into compilers and IDEs and includes tools for generating SPDX software bills of materials.
Timeline
- Project established as an alternative implementation of the pkg-config interface.
- The project added libpkgconf for embedding metadata resolution in compilers, IDEs, and other tools.
- Later development added bomtool and spdxtool for SPDX-oriented SBOM generation.
- Current releases use Meson and retain lightweight bootstrap paths through Makefile.lite and Muon.
Related projects
- freedesktop.org pkg-config is the original implementation and compatibility reference.
- libpkgconf exposes pkgconf functionality to other developer tools.
- bomtool and spdxtool generate SPDX-family software bills of materials from pkg-config module graphs.
- Meson is the recommended upstream build system; Muon is supported for bootstrap environments.
Sources
- Official project site: https://pkgconf.org/
- Official release history: https://github.com/pkgconf/pkgconf/blob/main/NEWS
- Official repository and README: https://github.com/pkgconf/pkgconf
- Package adoption evidence: source_facts.package-manager
approval gates
Human review metadata for risky commands
The local approval-gate seed includes 3 rules for pkgconf. Covered entrypoints: pkg-config, pkgconf. Severity labels: low, medium. Coverage: partial, reviewed 2026-05-21.
Example gated actions
- Print compiler or linker flags derived from package metadata.
- Add caller-supplied package metadata search paths.
- Use environment-controlled package metadata search paths.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
bomtool | cli | global executable | |
pccritic | cli | global executable | |
pkg-config | cli | global executable | |
pkgconf | cli | global executable | |
spdxtool | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-09-19
manager version3.0.7
manager updated2026-09-10
local dataok
upstreamnot checked
latest detectednot detected
https://github.com/pkgconf/pkgconf
- infoNo cached GitHub release or tag data was available.https://github.com/pkgconf/pkgconfnone confidence
install metadata
Package metadata
| Package key | brew:pkgconf |
|---|---|
| Version | 3.0.7 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/pkgconf |
| Homepage | https://github.com/pkgconf/pkgconf |
| Repository | https://github.com/pkgconf/pkgconf |
| License | ISC |
| Source archive | https://distfiles.ariadne.space/pkgconf/pkgconf-3.0.6.tar.xz |
| Last updated | 2026-09-10T05:50:10Z |
| Pulse | updated |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sequoia, sonoma, tahoe, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | pkgconf |
| Aliases |
|
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
libpkgconf-dev 1.8.1-4
development files for pkgconf
sudo apt install libpkgconf-dev- Section: libdevel
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
Debian apt95%
libpkgconf3 1.8.1-4
shared library for pkgconf
sudo apt install libpkgconf3- Section: libs
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- normalized package name match
- Matched by: Pkgconf
Debian apt95%
pkg-config 1.8.1-4
manage compile and link flags for libraries (transitional package)
sudo apt install pkg-config- Section: devel
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- normalized package name match
- Matched by: Pkgconf
Debian apt95%
pkgconf 1.8.1-4
manage compile and link flags for libraries
sudo apt install pkgconf- Section: devel
- Architecture: amd64
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
Debian apt95%
pkgconf-bin 1.8.1-4
manage compile and link flags for libraries (binaries)
sudo apt install pkgconf-bin- Section: devel
- Architecture: amd64
- Source Package: pkgconf
- 2 dependencies
- normalized package name match
- Matched by: Pkgconf
Nix95%
pkgconf
nix profile install nixpkgs#pkgconf- normalized package name match
- Matched by: Pkgconf
Ubuntu apt95%
libpkgconf-dev 1.8.1-2build1
development files for pkgconf
sudo apt install libpkgconf-dev- Section: libdevel
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
Ubuntu apt95%
libpkgconf3 1.8.1-2build1
shared library for pkgconf
sudo apt install libpkgconf3- Section: libs
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- normalized package name match
- Matched by: Pkgconf
Ubuntu apt95%
pkg-config 1.8.1-2build1
manage compile and link flags for libraries (transitional package)
sudo apt install pkg-config- Section: devel
- Architecture: amd64
- Source Package: pkgconf
- 1 dependencies
- normalized package name match
- Matched by: Pkgconf
Ubuntu apt95%
pkgconf 1.8.1-2build1
manage compile and link flags for libraries
sudo apt install pkgconf- Section: devel
- Architecture: amd64
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
Ubuntu apt95%
pkgconf-bin 1.8.1-2build1
manage compile and link flags for libraries (binaries)
sudo apt install pkgconf-bin- Section: devel
- Architecture: amd64
- Source Package: pkgconf
- 2 dependencies
- normalized package name match
- Matched by: Pkgconf
apk95%
pkgconf 3.0.6-r0
development framework configuration tools
https://github.com/pkgconf/pkgconf
sudo apk add pkgconf- License: ISC
- Architecture: x86_64
- Source Package: pkgconf
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
apk95%
pkgconf-dev 3.0.6-r0
development framework configuration tools (development files)
https://github.com/pkgconf/pkgconf
sudo apk add pkgconf-dev- License: ISC
- Architecture: x86_64
- Source Package: pkgconf
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
apk95%
pkgconf-doc 3.0.6-r0
development framework configuration tools (documentation)
https://github.com/pkgconf/pkgconf
sudo apk add pkgconf-doc- License: ISC
- Architecture: x86_64
- Source Package: pkgconf
- normalized package name match
- Matched by: Pkgconf
dnf95%
bomtool 2.5.1-2.fc45
Simple SBOM generator using pc(5) files
sudo dnf install bomtool- License: ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT
- Category: Unspecified
- Architecture: x86_64
- Source Package: pkgconf
- 4 dependencies
- 1 provides
- normalized package name match
- Matched by: Pkgconf
dnf95%
libpkgconf 2.5.1-2.fc45
Backend library for pkgconf
sudo dnf install libpkgconf- License: ISC AND BSD-4-Clause AND BSD-2-Clause AND pkgconf AND MIT
- Category: Unspecified
- Architecture: i686
- Source Package: pkgconf
- 2 dependencies
- 2 provides
- normalized package name match
- Matched by: Pkgconf
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- approval-gate seed metadata
- cross-ecosystem install command graph
- curated agent safety answer
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation