# 使用 Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper 安装 expat

查看 expat 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:expat
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install expat
```

  证据: local Homebrew formula metadata

- MacPorts (94%):

```sh
sudo port install expat
```

  证据: MacPorts ports tree: textproc/expat/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

### Linux

- apk (92%):

```sh
sudo apk add expat
```

  证据: Alpine Linux edge package indexes: expat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz

- Debian apt (92%):

```sh
sudo apt install expat
```

  证据: Debian stable package indexes: expat from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz

- dnf (92%):

```sh
sudo dnf install expat
```

  证据: Fedora Rawhide package metadata: expat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst

- Nix (92%):

```sh
nix profile install nixpkgs#expat
```

  证据: nixpkgs package indexes: pkgs/by-name/ex/expat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

- pacman (92%):

```sh
sudo pacman -S expat
```

  证据: Arch Linux sync databases: expat from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz

- zypper (92%):

```sh
sudo zypper install expat
```

  证据: openSUSE Tumbleweed package metadata: expat from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

## 软件包事实

- **软件包键:** brew:expat
- **软件包管理器:** Homebrew
- **版本:** 2.8.2
- **来源摘要:** XML 1.0 parser
- **主页:** <https://libexpat.github.io/>
- **仓库:** <https://github.com/libexpat/libexpat>
- **最后更新:** 2026-06-25T21:42:09Z
- **已生成:** 2026-08-03T19:37:03+00:00

## 可执行文件

- xmlwf (别名)

## 安装行为

- Bottle: 不可用

## 版本和新鲜度

- 页面生成时间: 2026-08-03
- 管理器版本: 2.8.2
## 项目历史与用法

Expat is a fast streaming XML parser library written in C, with xmlwf as its command-line well-formedness checker. It is package-manager-famous because XML parsing became infrastructure, and Expat is small, MIT-licensed, embeddable, and widely shipped.

### 项目历史

The official repository describes Expat as a C99 library for parsing XML 1.0, started by James Clark in 1997. Its model is event-oriented: users register handlers before parsing, and those handlers are called as document structures are discovered.

The project site frames Expat around streaming rather than building a full in-memory document tree. That makes it useful for files too large to fit in memory, and for applications where parser performance and flexible callbacks are more important than a high-level DOM interface.

### 采用历史

The Expat homepage states that numerous applications, libraries, and hardware use Expat, that bindings and third-party wrappers exist, and that Expat is packaged everywhere. That breadth is the key adoption story: many users never invoke xmlwf directly, but they depend on Expat through another program or language runtime.

The repository README documents common build-system integration, including CMake find_package usage. That is a sign of mature library adoption: Expat is not just an executable in package managers, but a dependency with headers, link targets, and ABI expectations.

### 使用方式

Developers use libexpat when they want a C XML parser that calls application-defined handlers for starts, ends, character data, and related XML structures. The included xmlwf executable is used to check whether XML input is well formed.

Because XML parsers sit at input boundaries, Expat's package history is often security-driven. The official GitHub issue tracker includes release coordination that references downstream updates in CPython, Gentoo, Spack, Homebrew, NixOS, MSYS2, and other packaging ecosystems when CVE fixes land.

### 为什么软件包爱好者会关心

Expat is a dependency-package archetype: boring when healthy, urgent when vulnerable. It is small enough to be embedded or vendored, but important enough that a security update can ripple through Python, Linux distributions, language package sets, and embedded builds.

The package also demonstrates the difference between library identity and command identity. Homebrew exposes xmlwf as the executable, while the real package value is libexpat and its headers.

### 时间线

- 1997: James Clark started Expat.
- 2.4.x: Security releases triggered broad downstream package updates.
- 2025: Expat 2.7.2 release coordination referenced Homebrew, CPython, NixOS, MSYS2, Spack, Gentoo, and other downstreams.
- 2026: Expat 2.8.x release coordination continued around security fixes and downstream updates.

### Related projects

- CPython is a major downstream because Python includes pyexpat bindings and coordinates bundled Expat updates.
- CMake's FindEXPAT module is an important integration path for C and C++ projects.
- Other XML parsers are related by role, but Expat's official documentation emphasizes its streaming C API.

### 来源

- <https://github.com/libexpat/libexpat>
- <https://libexpat.github.io/>
- <https://libexpat.github.io/doc/>
- <https://libexpat.github.io/doc/api/latest/>
- <https://github.com/libexpat/libexpat/issues/1030>
- <https://github.com/libexpat/libexpat/issues/1214>


## 安全说明

没有找到 expat 的匹配本地密钥处理 manifest。Nucleus 软件包元数据仍在此发布，以便未来覆盖拥有稳定的软件包 URL。


## 其他软件包管理器记录

- Debian apt - expat - 2.7.1-2: normalized package name match | Debian stable package indexes: expat from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - example application | https://libexpat.github.io/
- Debian apt - libexpat1 - 2.7.1-2: normalized package name match | Debian stable package indexes: libexpat1 from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - runtime library | https://libexpat.github.io/
- Debian apt - libexpat1-dev - 2.7.1-2: normalized package name match | Debian stable package indexes: libexpat1-dev from https://deb.debian.org/debian/dists/stable/main/binary-amd64/Packages.xz | XML parsing C library - development kit | https://libexpat.github.io/
- Nix - expat: normalized package name match | nixpkgs package indexes: pkgs/by-name/ex/expat/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- Ubuntu apt - expat - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: expat from https://archive.ubuntu.com/ubuntu/dists/noble/universe/binary-amd64/Packages.gz | XML parsing C library - example application | https://libexpat.github.io/
- Ubuntu apt - libexpat1 - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libexpat1 from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | XML parsing C library - runtime library | https://libexpat.github.io/
- Ubuntu apt - libexpat1-dev - 2.6.1-2build1: normalized package name match | Ubuntu 24.04 LTS package indexes: libexpat1-dev from https://archive.ubuntu.com/ubuntu/dists/noble/main/binary-amd64/Packages.gz | XML parsing C library - development kit | https://libexpat.github.io/
- apk - expat - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C | https://libexpat.github.io/
- apk - expat-dev - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-dev from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (development files) | https://libexpat.github.io/
- apk - expat-doc - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-doc from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (documentation) | https://libexpat.github.io/
- apk - expat-static - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: expat-static from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (static library) | https://libexpat.github.io/
- apk - libexpat - 2.8.2-r0: normalized package name match | Alpine Linux edge package indexes: libexpat from https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz | XML Parser library written in C (libraries) | https://libexpat.github.io/
- dnf - expat - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | An XML parser library | https://libexpat.github.io/
- dnf - expat-devel - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | Libraries and header files to develop applications using expat | https://libexpat.github.io/
- dnf - expat-static - 2.8.1-2.fc45: normalized package name match | Fedora Rawhide package metadata: expat-static from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/07190dc5ae9f35ae73866675fed6d95fe6e8d9fe22c9d7cdf85862cb2ed24a4c-primary.xml.zst | expat XML parser static library | https://libexpat.github.io/
- pacman - expat - 2.8.2-1: normalized package name match | Arch Linux sync databases: expat from https://geo.mirror.pkgbuild.com/core/os/x86_64/core.db.tar.gz | An XML parser library | https://libexpat.github.io/


## Combined YAML source

View the package source record on GitHub. [combined/expat.yml](https://github.com/mxcl/pkgdb/blob/main/combined/expat.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph