{"id":13399760,"url":"https://github.com/microsoft/vcpkg","last_synced_at":"2026-03-04T04:03:18.427Z","repository":{"id":37244042,"uuid":"68312233","full_name":"microsoft/vcpkg","owner":"microsoft","description":"C++ Library Manager for Windows, Linux, and MacOS","archived":false,"fork":false,"pushed_at":"2026-02-26T01:27:46.000Z","size":100108,"stargazers_count":26666,"open_issues_count":1330,"forks_count":7371,"subscribers_count":432,"default_branch":"master","last_synced_at":"2026-02-26T06:39:11.444Z","etag":null,"topics":["c","cmake","cplusplus","cpp","libraries","package-manager","packages","vcpkg","visual-studio","windows"],"latest_commit_sha":null,"homepage":"","language":"CMake","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/microsoft.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE.txt","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-09-15T16:40:50.000Z","updated_at":"2026-02-26T03:21:08.000Z","dependencies_parsed_at":"2025-10-23T01:29:19.498Z","dependency_job_id":"a592fadb-b485-46e7-8941-c35fb3861c42","html_url":"https://github.com/microsoft/vcpkg","commit_stats":{"total_commits":19161,"total_committers":2143,"mean_commits":8.941203919738683,"dds":0.9138875841553155,"last_synced_commit":"c0bc859e696a769b72b5525bfe18899ae3411ef5"},"previous_names":[],"tags_count":71,"template":false,"template_full_name":null,"purl":"pkg:github/microsoft/vcpkg","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvcpkg","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvcpkg/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvcpkg/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvcpkg/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/microsoft","download_url":"https://codeload.github.com/microsoft/vcpkg/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/microsoft%2Fvcpkg/sbom","scorecard":{"id":643538,"data":{"date":"2025-08-11","repo":{"name":"github.com/microsoft/vcpkg","commit":"4bb07a326d9b9bce3703272a509e5bc25dd9cfd5"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.8,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":9,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:19","Warn: no topLevel permission defined: .github/workflows/check_issues.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/check_tools_sha.yml:9","Warn: no topLevel permission defined: .github/workflows/codeql.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/untrustedPR.yml:4","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":8,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is required - but no codeowners file found in repo","Info: 'last push approval' is required to merge on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: scripts/tls12-download-arm64.exe:1","Warn: binary detected: scripts/tls12-download.exe:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_issues.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/check_issues.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_tools_sha.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/check_tools_sha.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/codeql.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/stale.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/untrustedPR.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/untrustedPR.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/untrustedPR.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vcpkg/untrustedPR.yml/master?enable=pin","Warn: containerImage not pinned by hash: scripts/azure-pipelines/android/Dockerfile:3: pin your Docker image by updating ubuntu:noble-20250714 to ubuntu:noble-20250714@sha256:a08e551cb33850e4740772b38217fc1796a66da2506d312abe51acda354ff061","Warn: containerImage not pinned by hash: scripts/azure-pipelines/linux/Dockerfile:3: pin your Docker image by updating ubuntu:jammy-20250619 to ubuntu:jammy-20250619@sha256:3c61d3759c2639d4b836d32a2d3c83fa0214e36f195a3421018dbaaf79cbe37f","Info:   0 out of  10 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-21T11:26:53.647Z","repository_id":37244042,"created_at":"2025-08-21T11:26:53.647Z","updated_at":"2025-08-21T11:26:53.647Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29944292,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-28T13:49:17.081Z","status":"ssl_error","status_checked_at":"2026-02-28T13:48:50.396Z","response_time":90,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c","cmake","cplusplus","cpp","libraries","package-manager","packages","vcpkg","visual-studio","windows"],"created_at":"2024-07-30T19:00:42.379Z","updated_at":"2026-03-04T04:03:18.412Z","avatar_url":"https://github.com/microsoft.png","language":"CMake","funding_links":[],"categories":["CMake","Build Systems","HarmonyOS","C/C++ Tools and Frameworks","C/C++ Tools","Cmake","C++","Package Management","Prerequisites","C/C++ Tools, Libraries and Frameworks","C/C++ 程序设计","Building and running","Awesome Tools","排序","c","Tools","C/C++ Tools, Libraries, and Frameworks","Package Managers","Program"],"sub_categories":["Windows Manager","In-memory data grids","For C++/C","Windows","Interfaces","网络服务_其他","Languages","构建系统","viii. Linear Regression","E-Books","VS Code Extensions for Developer Productivity","Objective-C Tools, Libraries, and Frameworks","Mesh networks","JavaScript Libraries for Machine Learning","[Package management](https://en.wikipedia.org/wiki/Package_manager)","RPC (_Remote Procedure Call_)","C/C++"],"readme":"\u003c!-- \nThis document is a copy of the README file on the Microsoft/vcpkg-docs repository.\n\nTo make changes modify this file instead:\nhttps://github.com/microsoft/vcpkg-docs/blob/main/vcpkg/readme/vcpkg-README.md\n--\u003e\n\n[🌐 Read in a different language](https://learn.microsoft.com/locale/?target=https%3A%2F%2Flearn.microsoft.com%2Fvcpkg%2F)\n\n# vcpkg overview\n\nvcpkg is a free and open-source C/C++ package manager maintained by Microsoft\nand the C++ community. \n\nInitially launched in 2016 as a tool for assisting developers in migrating their\nprojects to newer versions of Visual Studio, vcpkg has evolved into a\ncross-platform tool used by developers on Windows, macOS, and Linux. vcpkg has a\nlarge collection of open-source libraries and enterprise-ready features designed to\nfacilitate your development process with support for any build and project\nsystems. vcpkg is a C++ tool at heart and is written in C++ with scripts in\nCMake. It is designed from the ground up to address the unique pain points C/C++\ndevelopers experience.\n\nThis tool and ecosystem are constantly evolving, and we always appreciate\ncontributions! Learn how to start contributing with our [packaging\ntutorial](https://learn.microsoft.com/vcpkg/get_started/get-started-adding-to-registry) and [maintainer\nguide](https://learn.microsoft.com/vcpkg/contributing/maintainer-guide).\n\n# Get started\n\nFirst, follow one of our quick start guides.\n\nWhether you're using CMake, MSBuild, or any other build system, vcpkg has you covered:\n\n* [vcpkg with CMake](https://learn.microsoft.com/vcpkg/get_started/get-started)\n* [vcpkg with MSBuild](https://learn.microsoft.com/vcpkg/get_started/get-started-msbuild)\n* [vcpkg with other build systems](https://learn.microsoft.com/vcpkg/users/buildsystems/manual-integration)\n\nYou can also use any editor:\n\n* [vcpkg with Visual Studio](https://learn.microsoft.com/vcpkg/get_started/get-started-vs)\n* [vcpkg with Visual Studio Code](https://learn.microsoft.com/vcpkg/get_started/get-started-vscode)\n* [vcpkg with\n  CLion](\u003chttps://www.jetbrains.com/help/clion/package-management.html\u003e)\n* [vcpkg with Qt Creator](\u003chttps://doc.qt.io/qtcreator/creator-vcpkg.html\u003e)\n\nIf a library you need is not present in the vcpkg registry, [open an issue on\nthe GitHub repository][contributing:submit-issue] or [contribute the package\nyourself](https://learn.microsoft.com/vcpkg/get_started/get-started-adding-to-registry).\n\nAfter you've gotten vcpkg installed and working, you may wish to [add\ntab completion to your terminal](https://learn.microsoft.com/vcpkg/commands/integrate#vcpkg-autocompletion).\n\n# Use vcpkg\n\nCreate a [manifest for your project's dependencies](https://learn.microsoft.com/vcpkg/consume/manifest-mode):\n\n```Console\nvcpkg new --application\nvcpkg add port fmt\n```\n\nOr [install packages through the command line](https://learn.microsoft.com/vcpkg/consume/classic-mode):\n\n```Console\nvcpkg install fmt\n```\n\nThen use one of our available integrations for\n[CMake](https://learn.microsoft.com/vcpkg/concepts/build-system-integration#cmake-integration),\n[MSBuild](https://learn.microsoft.com/vcpkg/concepts/build-system-integration#msbuild-integration) or \n[other build\nsystems](https://learn.microsoft.com/vcpkg/concepts/build-system-integration#manual-integration).\n\nFor a short description of all available commands, run `vcpkg help`.\nRun `vcpkg help [topic]` for details on a specific topic.\n\n# Key features\n\nvcpkg offers powerful features for your package management needs:\n\n* [easily integrate with your build system](https://learn.microsoft.com/vcpkg/concepts/build-system-integration)\n* [control the versions of your dependencies](https://learn.microsoft.com/vcpkg/users/versioning)\n* [package and publish your own packages](https://learn.microsoft.com/vcpkg/concepts/registries)\n* [reuse your binary artifacts](https://learn.microsoft.com/vcpkg/users/binarycaching)\n* [enable offline scenarios with asset caching](https://learn.microsoft.com/vcpkg/concepts/asset-caching)\n\n# Contribute\n\nvcpkg is an open source project, and is thus built with your contributions. Here\nare some ways you can contribute:\n\n* [Submit issues][contributing:submit-issue] in vcpkg or existing packages\n* [Submit fixes and new packages][contributing:submit-pr]\n\nPlease refer to our [mantainer guide](https://learn.microsoft.com/vcpkg/contributing/maintainer-guide) and\n[packaging tutorial](https://learn.microsoft.com/vcpkg/get_started/get-started-packaging) for more details.\n\nThis project has adopted the [Microsoft Open Source Code of\nConduct][contributing:coc]. For more information see the [Code of Conduct\nFAQ][contributing:coc-faq] or email\n[opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional\nquestions or comments.\n \n[contributing:submit-issue]: https://github.com/microsoft/vcpkg/issues/new/choose\n[contributing:submit-pr]: https://github.com/microsoft/vcpkg/pulls\n[contributing:coc]: https://opensource.microsoft.com/codeofconduct/\n[contributing:coc-faq]: https://opensource.microsoft.com/codeofconduct/\n  \n# Resources\n\n* Ports: [Microsoft/vcpkg](\u003chttps://github.com/microsoft/vcpkg\u003e)\n* Source code: [Microsoft/vcpkg-tool](\u003chttps://github.com/microsoft/vcpkg-tool\u003e)\n* Docs: [Microsoft Learn | vcpkg](https://learn.microsoft.com/vcpkg)\n* Website: [vcpkg.io](\u003chttps://vcpkg.io\u003e)\n* Email: [vcpkg@microsoft.com](\u003cmailto:vcpkg@microsoft.com\u003e)\n* Discord: [\\#include \\\u003cC++\\\u003e's Discord server](\u003chttps://www.includecpp.org\u003e), in the #🌏vcpkg channel\n* Slack: [C++ Alliance's Slack server](\u003chttps://cppalliance.org/slack/\u003e), in the #vcpkg channel\n\n# License\n\nThe code in this repository is licensed under the MIT License. The libraries\nprovided by ports are licensed under the terms of their original authors. Where\navailable, vcpkg places the associated license(s) in the location\n[`installed/\u003ctriplet\u003e/share/\u003cport\u003e/copyright`](https://learn.microsoft.com/vcpkg/contributing/maintainer-guide#install-copyright-file).\n\n# Security\n\nMost ports in vcpkg build the libraries in question using the original build\nsystem preferred by the original developers of those libraries, and download\nsource code and build tools from their official distribution locations. For use\nbehind a firewall, the specific access needed will depend on which ports are\nbeing installed. If you must install it in an \"air gapped\" environment, consider\ninstaling once in a non-\"air gapped\" environment, populating an [asset\ncache](https://learn.microsoft.com/vcpkg/users/assetcaching) shared with the otherwise \"air gapped\"\nenvironment.\n\n# Telemetry\n\nvcpkg collects usage data in order to help us improve your experience. The data\ncollected by Microsoft is anonymous. You can opt-out of telemetry by:\n\n- running the bootstrap-vcpkg script with `-disableMetrics`\n- passing `--disable-metrics` to vcpkg on the command line\n- setting the `VCPKG_DISABLE_METRICS` environment variable\n\nRead more about vcpkg telemetry at [https://learn.microsoft.com/vcpkg/about/privacy](https://learn.microsoft.com/vcpkg/about/privacy).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Fvcpkg","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fmicrosoft%2Fvcpkg","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fmicrosoft%2Fvcpkg/lists"}