macOS
Homebrewverified · 100%
brew install stuffbinlocal Homebrew formula metadata
brew / rank 10061
Install stuffbin with Homebrew, Nix
Compress and embed static files and assets into Go binaries. Version 1.3.0 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#stuffbin.
install
Additional install commands
Linux
Nixverified · 92%
nix profile install nixpkgs#stuffbinnixpkgs package indexes · pkgs/by-name/st/stuffbin/package.nix · source: api.github.com
overview
Package summary
Compress and embed static files and assets into Go binaries
Project links
Commands and aliases
- stuffbin
history
Project history and usage
stuffbin is a small Go utility and package for compressing static assets and appending them to Go binaries, then exposing them through a virtual filesystem at runtime.
Project history
The official README describes stuffbin as both a command-line utility and Go package for embedding static files into binaries. It says the project was inspired by zgok, with a simpler design and different abstractions.
The README was updated in June 2026 to say the project appears feature complete, with no changes required in roughly three years, while still being used in critical production systems.
Adoption history
The input package facts list stuffbin in Homebrew and Nix, which is consistent with a niche developer tool whose audience is Go application packagers rather than general end users.
Go 1.16 introduced native //go:embed support, and the README positions stuffbin against that built-in feature by emphasizing ZIP compression, dynamic embedding, path aliases, and embedding files outside the package directory.
How it is used
A typical stuffbin workflow builds a Go binary, runs stuffbin to append compressed assets, and then has the application read those assets back from itself through stuffbin's filesystem abstraction.
It is most relevant for distributing single-binary Go services with web assets, templates, or other static files while retaining a local-filesystem fallback during development.
Why package nerds care
stuffbin matters to package nerds because it sits at the boundary between application packaging and language tooling: it changes what a Go binary can carry without requiring an external asset directory.
Its continued niche after //go:embed is the interesting bit: package maintainers care about compression, dynamic post-build stuffing, and layouts that Go's native embedding deliberately restricts.
Timeline
- 2021: Go 1.16 introduced //go:embed, later documented by stuffbin as the native feature it compares against.
- 2026: The official README described stuffbin as feature complete and still used in critical production systems.
Related projects
- Go's //go:embed is the native alternative discussed by the README.
- zgok is named by the README as an inspiration for stuffbin.
Sources
- https://github.com/knadh/stuffbin#readme
- input.source_facts.package-manager
security posture
Risk level: blue
broad file, network, media, or database tool signal.
Risk classifier
blue risk · medium confidence · tool
Why
- broad file, network, media, or database tool signal
Signals
- text:compress
Install behavior
- No Homebrew bottle metadata was recorded.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
stuffbin | executable | indexed executable | Discovered from the local executable index. |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-08-03
manager version1.3.0
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:stuffbin |
|---|---|
| Version | 1.3.0 |
| Package manager | Homebrew |
| Homepage | https://github.com/knadh/stuffbin |
| Repository | https://github.com/knadh/stuffbin |
| Last updated | 2026-07-26T04:03:47+02:00 |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
stuffbin
nix profile install nixpkgs#stuffbin- normalized package name match
- Matched by: Stuffbin
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation