macOS
Homebrew已验证 · 100%
brew install carthagelocal Homebrew formula metadata
MacPorts已验证 · 94%
sudo port install carthageMacPorts ports tree · devel/carthage/Portfile · 来源: api.github.com
安装
其他安装命令
概览
软件包摘要
Decentralized dependency manager for Cocoa
项目链接
命令和别名
- carthage
历史
项目历史与用法
Carthage is a decentralized dependency manager for Cocoa. Its README says it builds dependencies and provides binary frameworks while leaving project structure and build settings under the developer's control.
项目历史
The public repository was created in 2014, during the period when Swift and modern Cocoa dependency management were taking shape. Carthage's official pitch was simplicity and decentralization: dependencies are declared in a Cartfile, resolved to exact versions in Cartfile.resolved, and built or downloaded without automatically editing the Xcode project.
采用历史
Carthage became a major alternative to CocoaPods for iOS and macOS projects that preferred explicit framework integration. Its documentation emphasizes manual Xcode integration, shared schemes, tagged releases, binary framework archives, and reproducible bootstrap through committed Cartfile.resolved files.
使用方式
A typical project creates a Cartfile next to its .xcodeproj or .xcworkspace, runs carthage update, then adds built frameworks or XCFrameworks from Carthage/Build into Xcode. Carthage can also checkout dependencies into Carthage/Checkouts, use Git submodules, cache builds, and authenticate binary framework downloads through ~/.netrc when --use-netrc is set.
为什么软件包爱好者会关心
Carthage is one of the canonical package-manager stories in Apple development: it rejects project mutation as a feature, relies on Git tags and semantic versions, and treats dependency builds as visible artifacts. For package-manager catalogs, it is a historically important Cocoa tool because it captures a distinct design point from CocoaPods and Swift Package Manager.
时间线
- 2014: Public GitHub repository created.
- 2021: README says version 0.37.0 encouraged XCFrameworks and required them for Apple Silicon Macs.
- 2020s: Documentation describes Cartfile, Cartfile.private, Cartfile.resolved, Carthage/Build, Carthage/Checkouts, and the shared cache under ~/Library/Caches/org.carthage.CarthageKit.
Related projects
- Official documentation compares Carthage's approach with CocoaPods.
- Carthage operates in the Cocoa, Xcode, Swift, iOS, macOS, tvOS, and watchOS ecosystem.
- Its artifacts and binary-project-specification docs connect it to GitHub releases and HTTPS-hosted framework archives.
来源
安全态势
风险级别：orange
infrastructure mutation or orchestration signal.
风险分类器
orange 风险 · 中 置信度 · infrastructure
原因
- infrastructure mutation or orchestration signal
信号
- text:dependency manager
安装行为
- 未记录 Homebrew bottle 元数据。
建议审查
在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
./Cartfile./Cartfile.private./Cartfile.resolved
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.netrc
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
carthage | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-08-03
管理器版本0.40.0
管理器更新时间
本地数据未知
上游不可用
检测到的最新版本未检测到
- OK没有生成新鲜度警告。
安装元数据
软件包元数据
| 软件包键 | brew:carthage |
|---|---|
| 版本 | 0.40.0 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/Carthage/Carthage |
| 仓库 | https://github.com/Carthage/Carthage |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
其他软件包管理器记录
匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。
MacPorts95%
carthage
sudo port install carthage- normalized package name match
- 匹配方式：Carthage
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
Combined YAML source
View the package source record on GitHub.
使用的来源
- Geiger risk classifier
- cross-ecosystem install command graph
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- pkg.so package database
- pkgdb category and tag curation