# Install git-vendor with Homebrew, Nix Command for managing git vendored dependencies. Version 1.3.0 via Homebrew; verified from local package data. Also installable with nix: nix profile install nixpkgs#git-vendor. ## Install ```sh sudo av install brew:git-vendor ``` Additional install commands: ### macOS - Homebrew (100%): ```sh brew install git-vendor ``` Evidence: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#git-vendor ``` Evidence: nixpkgs package indexes: pkgs/by-name/gi/git-vendor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Package facts - **Package key:** brew:git-vendor - **Package manager:** Homebrew - **Package manager page:** - **Version:** 1.3.0 - **Source summary:** Command for managing git vendored dependencies - **Homepage:** - **Repository:** - **Upstream docs:** - **License:** MIT - **Source archive:** - **Generated:** 2026-08-04T22:13:35+00:00 ## Executables - git-vendor (cli) - git-vendor (alias) ## Install behavior - Post-install hook: not defined - Bottle: available on all ## Freshness - Page generated: 2026-08-04 - Package-manager version: 1.3.0 - Local data: ok - Upstream repository: https://github.com/brettlangdon/git-vendor - Upstream latest detected: v1.3.0 (current) - info: No package-manager update timestamp was available. ## Project history and usage git-vendor is a shell Git command that wraps git subtree to add, list, update, and share vendored dependencies. ### Project history Brett Langdon created the git-vendor repository in January 2016. The README explains that the tool follows the Go vendoring convention of storing dependencies under vendor/ using fully qualified project paths. The project stayed close to git subtree. Later releases refined command behavior, including a 2022 release that added a push command through a community contribution. ### Adoption history git-vendor spread through source installation, Homebrew, and other package-manager formulas. Its adoption niche was teams that wanted vendored source checked into a repository without relying on language-specific package managers. ### How it is used Practitioners use git vendor add to import a repository at a ref, git vendor list to inspect recorded source metadata, git vendor update to move a vendored dependency forward, and git vendor upstream to share changes back. ### Why package nerds care The tool is significant in package-management history because it captures a pre-module and cross-language vendoring pattern: source is copied into the tree, but the Git history and vendor metadata preserve where that source came from. ### Timeline - 2016: Repository created for a git subtree-based vendoring workflow. - 2021: v1.2.x releases refined update behavior and portability. - 2022: v1.3.0 added a push command. ### Related projects - git subtree, Go vendor directories, Homebrew ### Sources - - - - - ## Security Notes narrow executable package without higher-risk signals. - **Geiger risk:** green / low - narrow executable package without higher-risk signals ## Source Database Details - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** git-vendor - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Other Package-Manager Records - Nix - git-vendor: normalized package name match | nixpkgs package indexes: pkgs/by-name/gi/git-vendor/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 ## Related links - [Source-control packages](https://pkg.so/source-control-tools/) - Belongs to a source-control command family. - [Terminal utility packages](https://pkg.so/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [Text processing packages](https://pkg.so/text-processing-tools/) - Matched text, document, or structured-data processing metadata. - [Developer build packages](https://pkg.so/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata. - [maven](https://pkg.so/brew/maven/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [git-lfs](https://pkg.so/brew/git-lfs/) - Shares pkgdb curated category or tags: cli, developer-tools, git-extension. - [gradle](https://pkg.so/brew/gradle/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [poetry](https://pkg.so/brew/poetry/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [pipenv](https://pkg.so/brew/pipenv/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [swift-sh](https://pkg.so/brew/swift-sh/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [sbt](https://pkg.so/brew/sbt/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [luarocks](https://pkg.so/brew/luarocks/) - Shares pkgdb curated category or tags: cli, dependency-management, developer-tools. - [git-machete](https://pkg.so/brew/git-machete/) - Package names and metadata indicate a similar tool family. Shared terms: cli, developer, developer-tools, extension, git. - [git-url-sub](https://pkg.so/brew/git-url-sub/) - Package names and metadata indicate a similar tool family. Shared terms: cli, developer, developer-tools, extension, git. ## Combined YAML source View the package source record on GitHub. [combined/git-vendor.yml](https://github.com/mxcl/pkgdb/blob/main/combined/git-vendor.yml) ## Sources - pkg.so package database - Geiger risk classifier - package-page enrichment - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph