macOS
brew install libjcatlocal Homebrew formula metadata
安装
brew install libjcatlocal Homebrew formula metadata
sudo apk add libjcatAlpine Linux edge package indexes · libjcat · 来源: dl-cdn.alpinelinux.org
sudo dnf install libjcatFedora Rawhide package metadata · libjcat · 来源: dl.fedoraproject.org
nix profile install nixpkgs#libjcatnixpkgs package indexes · pkgs/by-name/li/libjcat/package.nix · 来源: api.github.com
sudo pacman -S libjcatArch Linux sync databases · libjcat · 来源: geo.mirror.pkgbuild.com
sudo apt install gir1.2-jcat-1.0Debian stable package indexes · gir1.2-jcat-1.0 · 来源: deb.debian.org
sudo zypper install jcat-toolopenSUSE Tumbleweed package metadata · jcat-tool · 来源: download.opensuse.org
概览
Library for reading Jcat files
历史
libjcat is a small GObject-oriented library and command-line tool for reading and writing gzip-compressed JSON catalog files. Its niche is software-integrity metadata: a Jcat file can collect checksums and detached signatures for the files in an archive, with support for SHA checksums, GPG signatures, and PKCS#7 signatures.
Richard Hughes published libjcat as a standalone project in 2020, splitting a catalog-signature concern that matters to firmware distribution into a reusable library. The README describes the format as equivalent in purpose to Microsoft Windows catalog files, but represented as gzipped JSON divided into JcatFile, JcatItem, and JcatBlob objects.
The project grew around firmware-update workflows. Its examples show firmware payloads and metainfo XML carried as catalog items, then signed or verified with local self-signing keys, explicit public keys, or imported detached signatures.
libjcat matters mostly because of fwupd and the Linux Vendor Firmware Service ecosystem. fwupd documentation explains that LVFS adds a .jcat file to uploaded firmware archives so original firmware and metadata are not modified while checksums and detached signatures remain verifiable.
Homebrew, Debian, Fedora, Arch, Nix, Alpine, Ubuntu, and openSUSE package it, which reflects its role as a small shared dependency for firmware and software-integrity tooling rather than as an end-user application.
Users usually meet libjcat through jcat-tool, which can create a catalog, add checksums, sign payloads, import detached signatures, export signature blobs, and verify a catalog against a public certificate. Version 2.0.0 added support for signing the checksum of a large payload instead of loading the whole payload for signature verification.
For package maintainers, libjcat is interesting because it packages a Windows-like catalog-signature idea in a Unix-friendly library with introspection bindings and a tiny CLI. It is one of those dependencies that looks obscure until a firmware update path needs detached integrity metadata that survives archive repacking.
安全态势
library-like package without higher-risk signals.
绿色 风险 · 低 置信度 · appliance
在无人值守的代理使用前,请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。
可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
jcat-tool | 可执行文件 | 已索引可执行文件 | 从本地可执行文件索引发现。 |
新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时,才会提示版本落后。
安装元数据
| 软件包键 | brew:libjcat |
|---|---|
| 版本 | 0.2.6 |
| 软件包管理器 | Homebrew |
| 主页 | https://github.com/hughsie/libjcat |
| 仓库 | https://github.com/hughsie/libjcat |
| Bottle | 未记录 |
| 服务 | 未声明 |
源数据库匹配
匹配项来自外部软件包管理器索引,并与本地 Automic Vault 软件包链接分开显示。
gir1.2-jcat-1.0 0.2.3-1
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0jcat 0.2.3-1
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcatlibjcat-dev 0.2.3-1
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-devlibjcat-tests 0.2.3-1
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-testslibjcat1 0.2.3-1
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1libjcat
nix profile install nixpkgs#libjcatgir1.2-jcat-1.0 0.2.0-2build3
GObject introspection data for libjcat
https://github.com/hughsie/libjcat
sudo apt install gir1.2-jcat-1.0jcat 0.2.0-2build3
JSON catalog library tool
https://github.com/hughsie/libjcat
sudo apt install jcatlibjcat-dev 0.2.0-2build3
development files for libjcat
https://github.com/hughsie/libjcat
sudo apt install libjcat-devlibjcat-tests 0.2.0-2build3
Installed tests for libjcat1
https://github.com/hughsie/libjcat
sudo apt install libjcat-testslibjcat1 0.2.0-2build3
JSON catalog library
https://github.com/hughsie/libjcat
sudo apt install libjcat1libjcat 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcatlibjcat-dev 0.2.3-r2
Library for reading and writing Jcat files (development files)
https://github.com/hughsie/libjcat
sudo apk add libjcat-devlibjcat-doc 0.2.3-r2
Library for reading and writing Jcat files (documentation)
https://github.com/hughsie/libjcat
sudo apk add libjcat-doclibjcat-tools 0.2.3-r2
Library for reading and writing Jcat files
https://github.com/hughsie/libjcat
sudo apk add libjcat-toolslibjcat 0.2.6-1.fc45
Library for reading Jcat files
https://github.com/hughsie/libjcat
sudo dnf install libjcat来源线索
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
View the package source record on GitHub.