A look at curl/curl-for-win: 784 stars on GitHub, written primarily in Shell, tracked under the Security category. Reproducible, static, curl binaries for Linux, macOS and Windows
Snapshot summary built from the project's own GitHub metadata — there's no written TopGit review yet. The page will update automatically when a full review is published.
WHY NO REVIEW YET
TopGit writes full reviews for the most-starred, most-requested repositories. This page is a snapshot until then — see the READ ME tab for the original README in full.
[!tip]
Sponsor these binary builds to support maintenance, fixes and further
improvements: https://github.com/sponsors/vszakats
Reproducible, static, curl binaries for Linux, macOS and Windows
Download our
.zip or .tar.xz packages.
Verify using sigstore, with
public key:
-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEOhipUjZMIlG0slqjGgJugAyA3E0v
6zvAK0vpHlwFsNRjOWnx/a2SSTN05EXwcKG86R6bCnQMglqmzYo3Jfe3VQ==
-----END PUBLIC KEY-----
Standalone curl, trurl tools and libcurl DLL. Static libraries
included.
Required: Windows Vista with
Universal CRT
(ARM64 or x64), macOS 10.12 Sierra (arm64 or x86_64),
Linux kernel 2.6.39+
(amd64, arm64, riscv64) with MUSL
builds.
HTTP/3,
HTTP/2 support,
and more.
Windows 64-bit builds are
Control Flow Guard
enabled. Intel builds have
CET
enabled. All builds have frame pointers enabled.
Transparent builds, using open source code, run in
public,
with auditable logs.
LLVM/Clang build environment with
mingw-w64 via
Debian,
Homebrew,
MSYS2.
llvm-mingw for ARM64.
Windows cross-built and published via
AppVeyor CI. Linux built via GHA.
Using reproducible container image
debian:testing-slim
via rootless podman. macOS built via GHA.
Linux and macOS builds are not official curl builds.
We verify components using SHA-256, and via digital signatures if provided.
We build reproducible binaries,
producing the same hash given the same input sources and C compiler.
Patching policy: No local patches. We may apply patches if already merged
upstream or — for showstoppers — had them submitted with fair
confidence of getting merged.
You can look up our package hashes in lines starting with SHA in the
build log.
Packages built across host platforms do not have identical hashes due to
slightly different build options and toolchain builds/versions. Except
llvm-mingw builds used for ARM64, which are reproducible across platforms.
We code-sign with a self-signed certificate on Windows, and avoid trusted
timestamps for reproducibility.
Features
Uses LibreSSL TLS backend.
feature
Windows
Linux
macOS
noh3
mini
micro
nano
pico
alt-svc
✓
✓
✓
✓
✓
✓
AppleSecTrust
-
-
✓
✓¹
✓¹
✓¹
✓¹
✓¹
asyn-rr
AsynchDNS
✓
✓
✓
✓
✓
✓
✓
✓
brotli
✓
✓
✓
✓
CAcert
✓
✓¹
✓¹
✓¹
✓¹
✓¹
ECH
gsasl
GSS-API
✓
✓¹
HSTS
✓
✓
✓
✓
✓
✓
✓
✓
HTTP2
✓
✓
✓
✓
✓
✓
HTTP3
✓
✓
✓
HTTPS-proxy
✓
✓
✓
✓
✓
✓
✓
✓
HTTPSIG²
✓³
✓³
✓³
✓³
✓³
✓³
✓³
HTTPSRR²
✓
✓
✓
✓
✓
✓
✓
IDN
✓
✓
✓¹
✓¹
✓¹
✓¹
IPv6
✓
✓
✓
✓
✓
✓
✓
✓
Kerberos
✓
✓¹
✓¹
✓¹
✓¹
Largefile
✓
✓
✓
✓
✓
✓
✓
✓
libz
✓
✓
✓
✓
✓
✓
✓
✓
MultiSSL
NativeCA
✓
-
-
✓¹
✓¹
✓¹
✓¹
✓¹
proxy-HTTP3²
✓
✓
✓
PSL
✓
✓
✓
✓
✓
✓
✓
✓
SPNEGO
✓
✓¹
✓¹
✓¹
✓¹
SSL
✓
✓
✓
✓
✓
✓
✓
✓
SSLS-EXPORT²
SSPI
✓
-
-
✓¹
✓¹
✓¹
✓¹
threadsafe
✓
✓
✓
✓
✓
✓
✓
✓
Unicode
-
-
UnixSockets
✓
✓
✓
✓
✓
✓
✓
zstd
✓
✓
✓
✓
protocol
Windows
Linux
macOS
noh3
mini
micro
nano
pico
dict
✓
✓
✓
✓
✓
✓
✓
file
✓
✓
✓
✓
✓
✓
✓
ftp/ftps
✓
✓
✓
✓
✓
✓
✓
gopher/gophers
✓
✓
✓
✓
✓
✓
✓
http/https
✓
✓
✓
✓
✓
✓
✓
✓
imap/imaps
✓
✓
✓
✓
✓
✓
✓
ipfs/ipns
✓
✓
✓
✓
✓
✓
✓
ldap/ldaps
✓
✓
✓
✓
✓
✓
mqtt/mqtts
✓
✓
✓
✓
✓
✓
✓
pop3/pop3s
✓
✓
✓
✓
✓
✓
✓
rtsp
✓
✓
✓
✓
✓
✓
✓
scp/sftp
✓
✓
✓
✓
✓
smtp/smtps
✓
✓
✓
✓
✓
✓
✓
telnet
✓
✓
✓
✓
✓
✓
✓
tftp
✓
✓
✓
✓
✓
✓
✓
ws/wss
✓
✓
✓
✓
✓
✓
✓
¹: platform-dependent
²: experimental
³: expected in upcoming release 8.22.0
noh3: HTTP/2
mini: without brotli and zstd, with OS TLS backend (Schannel) if available
micro: without libssh2
nano: HTTP/1.1
pico: HTTP/1.1-only
Downloads
Latest version for Windows:
https://curl.se/windows/
Specific versions for Windows, back to 8.10.0: https://curl.se/windows/dl-<curl-version>_<build-1-to-N>/curl-<curl-version>_<build-1-to-N>-{win64,win64a}-mingw.zip Example:
https://curl.se/windows/dl-8.10.0_1/curl-8.10.0_1-win64-mingw.zip
Information in this document is subject to change without notice and does
not represent or imply any future commitment by the participants of the
project.
The most recent commit recorded on curl/curl-for-win was 13 days ago, based on the GitHub push timestamp. The repository has 223 forks — one of the better signals of community interest.
How does curl/curl-for-win compare to other Security projects?
curl/curl-for-win is tracked by TopGit in the Security category, with 784 GitHub stars and written in Shell. Browse the Security topic page on TopGit to compare it against similar projects by stars and activity.
How many stars does curl/curl-for-win have?
curl/curl-for-win has 784 GitHub stars — refresh the page for the live number, or check github.com/curl/curl-for-win. TopGit mirrors GitHub's count but does not claim minute-by-minute accuracy.
Is curl/curl-for-win open source?
Yes — curl/curl-for-win ships under the MIT license, which makes its source code freely readable (and, depending on license terms, forkable and reusable). Source: github.com/curl/curl-for-win.
What is curl/curl-for-win?
curl/curl-for-win (curl/curl-for-win) is a Shell project on GitHub. From the project's own README: Reproducible, static, curl binaries for Linux, macOS and Windows
Where do I read more about curl/curl-for-win?
This TopGit page is a snapshot — the READ ME tab shows the project's own README content (links stripped, images preserved). The GitHub repository at github.com/curl/curl-for-win is the definitive source.
Read full README in the tab above.
Want a second opinion on curl-for-win?
Ask an AI that can read this page — one click and you get its take on curl-for-win.