pkg.sopackage field notes

brew / 排名 1120

使用 Homebrew 安装 create-dmg

查看 create-dmg 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install create-dmg

provider-native install command

概览

软件包摘要

Shell script to build fancy DMGs

命令和别名

  • create-dmg

历史

项目历史与用法

create-dmg is a macOS command-line packaging helper for producing polished disk images from a source folder. It wraps standard macOS disk-image tooling with options for Finder window layout, icons, background images, Applications drop links, encryption, signing, and notarization.

项目历史

The project README credits Andrey Tarantsov as the original creator and says Andrew Janke helped substantially with the project in May 2020. The project is maintained as a shell script in a public GitHub repository under the create-dmg organization.

采用历史

The README documents Homebrew installation as the first installation path, followed by release downloads and cloning the repository. That distribution style made create-dmg convenient for macOS developers who wanted repeatable DMG creation in release scripts without maintaining their own AppleScript and hdiutil wrappers.

使用方式

The normal workflow is to run create-dmg with an output .dmg name and a source folder, then pass options for volume name, icon placement, background art, filesystem format, encryption, codesigning, notarization, and related macOS packaging details.

为什么软件包爱好者会关心

For package maintainers, create-dmg matters because DMG layout is a macOS distribution detail that is easy to get wrong and awkward to reproduce. The tool packages common release-engineering conventions into one script that Homebrew, MacPorts, and Nix can expose as a small CLI dependency.

时间线

  • Original project: Created by Andrey Tarantsov
  • 2020-05: README notes substantial help from Andrew Janke
  • README: Documents Homebrew installation and release-download installation

Related projects

  • The README lists node-appdmg and dmgbuild as alternatives for building macOS disk images.

安全态势

风险级别:yellow

generalized runtime or code generation signal.

风险分类器

yellow 风险 · 中 置信度 · runtime

原因

  • generalized runtime or code generation signal

信号

  • text:shell

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
create-dmg可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本1.3.0
管理器更新时间2026-07-02
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:create-dmg
版本1.3.0
软件包管理器Homebrew
主页https://github.com/create-dmg/create-dmg
仓库https://github.com/create-dmg/create-dmg
最后更新2026-07-02T12:12:51Z
Pulseupdated
Bottle未记录
服务未声明

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation