brew / rank 8189

Install smap with Homebrew, Nix

Drop-in replacement for Nmap powered by shodan.io. Version 0.1.12 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#smap.

Install command Security notes

install

Additional install commands

macOS

Homebrewverified · 100%

brew install smap

local Homebrew formula metadata

Linux

Nixverified · 92%

nix profile install nixpkgs#smap

nixpkgs package indexes · pkgs/by-name/sm/smap/package.nix · source: api.github.com

overview

Package summary

Drop-in replacement for Nmap powered by shodan.io

Project links

Homepage

Commands and aliases

smap

history

Project history and usage

Smap is a passive, Nmap-like port scanner backed by Shodan data. It accepts many familiar Nmap-style arguments while avoiding direct connections to targets unless active verification is requested.

Project history

The GitHub repository was created in March 2022. The first release candidate, 0.1.0-rc, appeared later that month, followed by 0.1.0 in April 2022; the README describes Smap as a passive Nmap-like scanner built with shodan.io.

Adoption history

The official README documents prebuilt binaries, Go installation, AUR packages, and Homebrew installation. The supplied package metadata lists Homebrew and Nix package names, showing adoption by security-tool package sets as well as Go-based CLI users.

How it is used

Smap is used for fast passive port lookups, Nmap-compatible output formats, target lists, port filters, vulnerability display, and optional active verification through local nmap. The README notes that it does not require an account or API key.

Why package nerds care

Smap is interesting to package nerds because it wraps a network-intelligence service in a familiar Unix CLI shape: one binary, Nmap-like flags, packaged installs, and output formats that fit existing scanner pipelines.

Timeline

2022: GitHub repository created.
2022: 0.1.0-rc and 0.1.0 released.
2022: 0.1.12 released.
2026: 0.2.0-rc published.

Related projects

Smap is related to Nmap, Shodan InternetDB, passive reconnaissance tools, and security scanner packaging ecosystems.

Sources

https://api.github.com/repos/s0md3v/Smap
https://api.github.com/repos/s0md3v/Smap/releases
https://github.com/s0md3v/Smap#readme
https://github.com/s0md3v/Smap/wiki/FAQ
input.source_facts.package-manager

security posture

Risk level: yellow

generalized runtime or code generation signal.

Risk classifier

yellow risk · medium confidence · runtime

Why

generalized runtime or code generation signal

Signals

text:repl

Install behavior

No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`smap`	executable	indexed executable	Discovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03

manager version0.1.12

manager updated2026-07-26

local dataunknown

upstreamnot available

latest detectednot detected

okNo freshness warnings were generated.

install metadata

Package metadata

Package key	brew:smap
Version	0.1.12
Package manager	Homebrew
Homepage	https://github.com/s0md3v/Smap
Repository	https://github.com/s0md3v/Smap
Last updated	2026-07-26T04:03:42+02:00
Pulse	updated
Bottle	not recorded
Service	none declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

smap

nix profile install nixpkgs#smap

normalized package name match
Matched by: Smap

nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/sm/smap/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Combined YAML source

View the package source record on GitHub.

combined/smap.yml

Used sources

Geiger risk classifier
cross-ecosystem install command graph
curated package history
external package-manager database matches
pkg.so package database
pkgdb category and tag curation