pkg.sopackage field notes

brew / 排名 4699

使用 Homebrew 安装 dub

查看 dub 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install dub

provider-native install command

概览

软件包摘要

Build tool for D projects

命令和别名

  • dub

历史

项目历史与用法

DUB is the package and build manager that gave the D language ecosystem a conventional registry-plus-build-tool workflow. It matters because it made reusable D libraries installable and buildable through a shared package description instead of scattered project-specific build scripts.

项目历史

The project describes itself as a package and build manager for D applications and libraries, with a central package registry at code.dlang.org. Its README says DUB emerged as a more general replacement for the package manager originally associated with vibe.d, then expanded from dependency management into building projects and generating IDE project files.

DUB's design center was deliberately small: a short dub.json or later package file, source in a conventional directory, and automatic dependency downloads during builds. That placed it in the same cultural slot as Cargo, npm, or Bundler, but tailored to D's compiler ecosystem and common D project layouts.

采用历史

DUB became the normal packaging path for public D libraries because the official registry, documentation, and compiler-facing workflow all point through it. The README records broad packaging support over time, including Homebrew, MacPorts, Chocolatey, Debian/Ubuntu, Arch, Alpine, FreeBSD, and OpenBSD.

Its adoption is also tied to IDE and editor integration. The project documentation notes VisualD project generation and Mono-D support for dub.json, which helped make DUB package metadata double as development-environment metadata.

使用方式

D developers use DUB to create packages, resolve dependencies, build executables and libraries, run tests, and publish packages to the D package registry. The common workflow is intentionally root-directory based: run dub from a package directory and let the package file describe dependencies and build settings.

DUB also has package-nerd value as an example of a language ecosystem build tool that grew out of a framework-specific need, then became the ecosystem-level package manager.

为什么软件包爱好者会关心

For package database work, DUB is a high-signal package because it is both a CLI and an ecosystem primitive: the executable is a developer tool, while the project also defines package metadata conventions for the D community.

It is historically interesting because it sits between older makefile-centric compiled-language workflows and newer language-native package managers. DUB made D packages discoverable through a central registry while still respecting multiple D compilers such as DMD, GDC, and LDC.

时间线

  • 2010s: DUB emerges from vibe.d's package-manager needs and generalizes into a package and build manager for D.
  • 2010s: code.dlang.org becomes the central DUB package registry.
  • 2017: DUB 1.5 and 1.6 releases appear in the GitHub release history.
  • 2020s: DUB remains the documented D package/build workflow and is packaged by mainstream OS package managers.

Related projects

  • vibe.d is central to DUB's origin story because DUB's README names it as the package manager that DUB generalized beyond.
  • code.dlang.org is the registry side of the DUB ecosystem; VisualD and Mono-D are related development tools that consumed DUB package metadata.

安全态势

风险级别:yellow

generalized runtime or code generation signal.

风险分类器

yellow 风险 · 中 置信度 · runtime

原因

  • generalized runtime or code generation signal

信号

  • text:build tool

安装行为

  • 未记录 Homebrew bottle 元数据。

建议审查

在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/var/lib/dub/settings.json<dub executable folder>/../etc/dub/settings.json/etc/dub/settings.json$DUB_HOME/settings.json$ROOT_PACKAGE_DIR/dub.settings.json
Windows
%ProgramData%\dub\settings.json<dub executable folder>\..\etc\dub\settings.json%DUB_HOME%\settings.json%ROOT_PACKAGE_DIR%\dub.settings.json

可执行文件

已安装的可执行文件

命令类型暴露范围备注
dub可执行文件已索引可执行文件从本地可执行文件索引发现。

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。

页面生成时间2026-08-03
管理器版本1.41.0
管理器更新时间2026-06-22
本地数据未知
上游不可用
检测到的最新版本未检测到
  • OK没有生成新鲜度警告。

安装元数据

软件包元数据

软件包键brew:dub
版本1.41.0
软件包管理器Homebrew
主页https://code.dlang.org/getting_started
仓库https://github.com/dlang/dub
最后更新2026-06-22T14:03:12-07:00
Pulseupdated
Bottle未记录
服务未声明

来源线索

由仓库数据生成

此页面由 av-webscripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • Nucleus package database
  • curated configuration and credential file locations
  • curated package history
  • pkgdb category and tag curation